Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52qc-q82v-p8hj

Опубликовано: 04 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, allowing malicious actors to inject and execute arbitrary JavaScript code, potentially compromising user data, escalating privileges, or executing unauthorized actions. The issue exists in multiple areas, including content editing, link management, and file uploads.

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, allowing malicious actors to inject and execute arbitrary JavaScript code, potentially compromising user data, escalating privileges, or executing unauthorized actions. The issue exists in multiple areas, including content editing, link management, and file uploads.

EPSS

Процентиль: 34%
0.0014
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.7
nvd
около 1 года назад

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, allowing malicious actors to inject and execute arbitrary JavaScript code, potentially compromising user data, escalating privileges, or executing unauthorized actions. The issue exists in multiple areas, including content editing, link management, and file uploads.

EPSS

Процентиль: 34%
0.0014
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-79