Описание
Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:the_war_forge:warforge.news:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00346
Низкий
2.6 Low
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure.
EPSS
Процентиль: 57%
0.00346
Низкий
2.6 Low
CVSS2
Дефекты
NVD-CWE-Other