exploitDog

CVE-2021-40260

Опубликовано: 08 нояб. 2021

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.

Ссылки

https://sisl.lab.uic.edu/projects/chess/tailor-management/
Exploit
Third Party Advisory
Tool Signature
https://sisl.lab.uic.edu/projects/chess/tailor-management/
Exploit
Third Party Advisory
Tool Signature

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tailor_management_system_project:tailor_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.0024

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-cm6p-27v2-hwf5

github

больше 3 лет назад

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php and (b) addpayment.php, and the (3) error parameter in index.php.

EPSS

Процентиль: 47%

0.0024

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79