Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xr6w-643f-4rpc

Опубликовано: 17 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function.

A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function.

EPSS

Процентиль: 71%
0.00693
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
почти 3 года назад

A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter under the Add New Articles function.

EPSS

Процентиль: 71%
0.00693
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79