Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jgq4-chcx-4fv7

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemail or (2) subject parameter in the Contact form to contact/.

Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemail or (2) subject parameter in the Contact form to contact/.

EPSS

Процентиль: 45%
0.00225
Низкий

Дефекты

CWE-79

Связанные уязвимости

nvd
больше 11 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or HTML via the (1) uemail or (2) subject parameter in the Contact form to contact/.

EPSS

Процентиль: 45%
0.00225
Низкий

Дефекты

CWE-79