Описание
CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when victims interact with delete buttons.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cmsimple:cmsimple:5.4:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.00029
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
около 2 месяцев назад
CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when victims interact with delete buttons.
EPSS
Процентиль: 8%
0.00029
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79