Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-97mj-hh96-r6f4

Опубликовано: 03 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.1

Описание

Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London. XFS is a web attack technique that exploits specific browser bugs to spy on users via JavaScript. This type of attack is based on social engineering and depends entirely on the browser chosen by the user, so it is perceived as a minor threat to web application security. This vulnerability only works in older browsers.

Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London. XFS is a web attack technique that exploits specific browser bugs to spy on users via JavaScript. This type of attack is based on social engineering and depends entirely on the browser chosen by the user, so it is perceived as a minor threat to web application security. This vulnerability only works in older browsers.

EPSS

Процентиль: 15%
0.00049
Низкий

2.1 Low

CVSS4

Дефекты

CWE-1021

Связанные уязвимости

nvd
5 месяцев назад

Cross-Frame Scripting (XFS) vulnerability in BoomCMS v9.1.4 from UXB London. XFS is a web attack technique that exploits specific browser bugs to spy on users via JavaScript. This type of attack is based on social engineering and depends entirely on the browser chosen by the user, so it is perceived as a minor threat to web application security. This vulnerability only works in older browsers.

EPSS

Процентиль: 15%
0.00049
Низкий

2.1 Low

CVSS4

Дефекты

CWE-1021