exploitDog

CVE-2022-24981

Опубликовано: 16 фев. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php.

Ссылки

https://JQueryForm.com
Vendor Advisory
https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
Third Party Advisory
https://www.nou-systems.com/cyber-security
Third Party Advisory
https://JQueryForm.com
Vendor Advisory
https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
Third Party Advisory
https://www.nou-systems.com/cyber-security
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jqueryform:jqueryform:*:*:*:*:*:*:*:*

Версия до 2022-02-05 (исключая)

EPSS

Процентиль: 63%

0.00445

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-x6x6-x36v-4rcr

github

почти 4 года назад

A reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before 2022-02-05 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to admin.php.

EPSS

Процентиль: 63%

0.00445

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79