Описание
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:427bb:fourtwosevenbb:2.0:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.1:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.2:*:*:*:*:*:*:*
cpe:2.3:a:427bb:fourtwosevenbb:2.2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 92%
0.07555
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.
EPSS
Процентиль: 92%
0.07555
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other