Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jj2g-vwxg-qv6m

Опубликовано: 24 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 5.3

Описание

AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute arbitrary scripts in user browser sessions.

AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute arbitrary scripts in user browser sessions.

EPSS

Процентиль: 7%
0.00027
Низкий

5.1 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 месяцев назад

AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute arbitrary scripts in user browser sessions.

EPSS

Процентиль: 7%
0.00027
Низкий

5.1 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-79