Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xfc-vjrj-jr3w

Опубликовано: 03 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely but requires authentication. Expliot details have been disclosed to the public.

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely but requires authentication. Expliot details have been disclosed to the public.

EPSS

Процентиль: 44%
0.00215
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 2.4
nvd
больше 3 лет назад

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but requires authentication. Exploit details have been disclosed to the public.

EPSS

Процентиль: 44%
0.00215
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79