Описание
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:1234n:minicms:1.10:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00219
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.8
github
больше 3 лет назад
In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.
EPSS
Процентиль: 44%
0.00219
Низкий
4.8 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79