Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wvvr-pwf3-q292

Опубликовано: 20 янв. 2022
Источник: github
Github: Не прошло ревью

Описание

A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

EPSS

Процентиль: 44%
0.00221
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 4 лет назад

A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

EPSS

Процентиль: 44%
0.00221
Низкий

Дефекты

CWE-79