CVE-2020-10227

Опубликовано: 14 сент. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.

Ссылки

https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Exploit
Third Party Advisory
VDB Entry
https://sourceforge.net/projects/vtecrm/
Product
Third Party Advisory
https://vtenext.com/en/
Vendor Advisory
https://www.exploit-db.com/exploits/48804
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vtenext:vtenext:19:*:*:*:community:*:*:*

EPSS

Процентиль: 66%

0.00509

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-wfvm-4gxx-hpcr

github

больше 3 лет назад