exploitDog

GHSA-ch95-57m5-v7c9

Опубликовано: 28 сент. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

Ссылки

EPSS

Процентиль: 69%

0.00597

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-43872

CVSS3: 5.4

nvd

больше 2 лет назад

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

EPSS

Процентиль: 69%

0.00597

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79