CVE-2022-27885

Опубликовано: 25 мар. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters.

Ссылки

https://github.com/magicblack/maccms10/issues/840
Exploit
Issue Tracking
Third Party Advisory
https://github.com/magicblack/maccms10/issues/840
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00223

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5j2v-3vwp-pgv7