exploitDog

GHSA-g2mq-cq8h-hvg9

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php

Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php

Ссылки

EPSS

Процентиль: 33%

0.00132

Низкий

CVE ID

Связанные уязвимости

CVE-2020-25343

CVSS3: 5.4

nvd

больше 5 лет назад

Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php

EPSS

Процентиль: 33%

0.00132

Низкий

CVE ID