exploitDog

CVE-2018-20837

Опубликовано: 09 мая 2019

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.

Ссылки

https://github.com/Typesetter/Typesetter/commit/fd637e2919e7f77c498a91a8e9d353f8e12afc9a
Patch
Third Party Advisory
https://www.netsparker.com/web-applications-advisories/ns-18-026-reflected-cross-site-scripting-in-typesetter/
Exploit
Third Party Advisory
https://github.com/Typesetter/Typesetter/commit/fd637e2919e7f77c498a91a8e9d353f8e12afc9a
Patch
Third Party Advisory
https://www.netsparker.com/web-applications-advisories/ns-18-026-reflected-cross-site-scripting-in-typesetter/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:typesettercms:typesetter:5.1:*:*:*:*:*:*:*

EPSS

Процентиль: 46%

0.00235

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-36q9-65j8-xvpg

github

больше 3 лет назад

include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.

EPSS

Процентиль: 46%

0.00235

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79