Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v334-7q67-v4rm

Опубликовано: 14 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form sent to login panel at /softcom/ with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form sent to login panel at /softcom/ with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

EPSS

Процентиль: 27%
0.00096
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
10 месяцев назад

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form sent to login panel at /softcom/ with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 79.0

EPSS

Процентиль: 27%
0.00096
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79