Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xp8-7cch-3599

Опубликовано: 16 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 5.4

Описание

WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.

WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.

EPSS

Процентиль: 10%
0.00034
Низкий

7.1 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 месяцев назад

WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.

EPSS

Процентиль: 10%
0.00034
Низкий

7.1 High

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-601