Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mvcx-ggh9-mwc6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.

EPSS

Процентиль: 45%
0.00228
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.

CVSS3: 5.4
debian
больше 4 лет назад

A persistent cross-site scripting vulnerability was discovered in the ...

EPSS

Процентиль: 45%
0.00228
Низкий

Дефекты

CWE-79