Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qgxh-9fmh-3q95

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS.

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS.

EPSS

Процентиль: 52%
0.00288
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 5 лет назад

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS.

EPSS

Процентиль: 52%
0.00288
Низкий

Дефекты

CWE-79