Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p3xc-xr5c-cc37

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipity_event_xsstrust plugin and a set_config error in that plugin.

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipity_event_xsstrust plugin and a set_config error in that plugin.

EPSS

Процентиль: 40%
0.00185
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 9 лет назад

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipity_event_xsstrust plugin and a set_config error in that plugin.

CVSS3: 5.4
nvd
почти 9 лет назад

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipity_event_xsstrust plugin and a set_config error in that plugin.

CVSS3: 5.4
debian
почти 9 лет назад

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admi ...

EPSS

Процентиль: 40%
0.00185
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79