Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c6hp-2v43-w3w7

Опубликовано: 16 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 7.2

Описание

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.

EPSS

Процентиль: 16%
0.0025
Низкий

5.3 Medium

CVSS4

7.2 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.2
nvd
4 месяца назад

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.

EPSS

Процентиль: 16%
0.0025
Низкий

5.3 Medium

CVSS4

7.2 High

CVSS3

Дефекты

CWE-79