CVE-2022-24587

Опубликовано: 15 фев. 2022

Источник: debian

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
pluxml	removed			package
pluxml	end-of-life		buster	package

Примечания

https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24587/CVE-2022-24587.pdf

EPSS

Процентиль: 43%

0.00206

Низкий

Связанные уязвимости

CVE-2022-24587

CVSS3: 5.4

ubuntu

почти 4 года назад

A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML.

CVE-2022-24587

CVSS3: 5.4

nvd

почти 4 года назад

A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML.

GHSA-cg68-vxrx-mqh9

github

почти 4 года назад

A stored cross-site scripting (XSS) vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML.

EPSS

Процентиль: 43%

0.00206

Низкий