Описание
Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. Attackers can submit crafted JavaScript payloads through the comment submission form to execute arbitrary code in victim browsers.
EPSS
Процентиль: 12%
0.00039
Низкий
7.2 High
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 7.2
github
4 дня назад
Victor CMS 1.0 contains a stored cross-site scripting vulnerability in the 'comment_author' POST parameter that allows attackers to inject malicious scripts. Attackers can submit crafted JavaScript payloads through the comment submission form to execute arbitrary code in victim browsers.
EPSS
Процентиль: 12%
0.00039
Низкий
7.2 High
CVSS3
Дефекты
CWE-79