CVE-2022-27887

Опубликовано: 25 мар. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter.

Ссылки

https://github.com/magicblack/maccms10/issues/840
Exploit
Issue Tracking
Third Party Advisory
https://github.com/magicblack/maccms10/issues/840
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028:*:*:*:*:*:*

cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00223

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p6xv-33w9-6vvv