Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f725-96vh-q7pm

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.

EPSS

Процентиль: 70%
0.00633
Низкий

Дефекты

CWE-79

Связанные уязвимости

nvd
больше 13 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.

EPSS

Процентиль: 70%
0.00633
Низкий

Дефекты

CWE-79