Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cmjc-2g23-9m8c

Опубликовано: 31 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters.

A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters.

EPSS

Процентиль: 14%
0.00046
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
6 месяцев назад

A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters.

EPSS

Процентиль: 14%
0.00046
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79