exploitDog

CVE-2021-33347

Опубликовано: 18 июн. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.

Ссылки

https://github.com/JPressProjects/jpress/issues/152
Exploit
Issue Tracking
Third Party Advisory
https://github.com/JPressProjects/jpress/issues/152#issuecomment-850119847
Exploit
Issue Tracking
Third Party Advisory
https://github.com/JPressProjects/jpress/issues/152
Exploit
Issue Tracking
Third Party Advisory
https://github.com/JPressProjects/jpress/issues/152#issuecomment-850119847
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jpress:jpress:*:*:*:*:*:*:*:*

Версия до 3.3.0 (включая)

EPSS

Процентиль: 39%

0.00172

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4fhx-wqc3-cg4x

github

больше 3 лет назад

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.

EPSS

Процентиль: 39%

0.00172

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79