Описание
SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.
Ссылки
- ExploitVDB Entry
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:seacms:seacms:11.1:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.00008
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.4
github
13 дней назад
SeaCMS 11.1 contains a stored cross-site scripting vulnerability in the checkuser parameter of the admin settings page. Attackers can inject malicious JavaScript payloads that will execute in users' browsers when the page is loaded.
EPSS
Процентиль: 1%
0.00008
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79