CVE-2011-3610

Опубликовано: 22 янв. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipity_event_freetag/tagcloud.swf.

Ссылки

https://git.schokokeks.org/freewvs.git/blob/ddc4be296c9c49987b53be064d6d2a9d12f50452/freewvsdb/plugins.freewvs
Third Party Advisory
https://packetstormsecurity.com/files/105054/Secunia-Security-Advisory-46005.html
Exploit
Third Party Advisory
VDB Entry
https://www.openwall.com/lists/oss-security/2011/10/10/3
Mailing List
Third Party Advisory
https://git.schokokeks.org/freewvs.git/blob/ddc4be296c9c49987b53be064d6d2a9d12f50452/freewvsdb/plugins.freewvs
Third Party Advisory
https://packetstormsecurity.com/files/105054/Secunia-Security-Advisory-46005.html
Exploit
Third Party Advisory
VDB Entry
https://www.openwall.com/lists/oss-security/2011/10/10/3
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:s9y:serendipity_event_freetag:*:*:*:*:*:*:*:*

Версия до 3.30 (исключая)

EPSS

Процентиль: 57%

0.00347

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-q2hh-33rr-fpj4

github

почти 4 года назад