Описание
Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:torrenttrader:torrenttrader:1.07:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00351
Низкий
2.6 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.
EPSS
Процентиль: 57%
0.00351
Низкий
2.6 Low
CVSS2
Дефекты
CWE-79