Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3849-33qq-vw2c

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section.

Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section.

EPSS

Процентиль: 46%
0.00231
Низкий

7.4 High

CVSS3

Дефекты

CWE-80

Связанные уязвимости

CVSS3: 7.4
nvd
почти 2 года назад

Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section.

EPSS

Процентиль: 46%
0.00231
Низкий

7.4 High

CVSS3

Дефекты

CWE-80