Описание
index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.
Ссылки
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:craftcms:craft_cms:3.0.25:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00471
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.8
github
больше 3 лет назад
Craft CMS Cross-site Scripting (XSS) Vulnerability
EPSS
Процентиль: 64%
0.00471
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79