exploitDog

CVE-2023-37786

Опубликовано: 13 июл. 2023

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail Settings[backend], Mail Settings[host], Mail Settings[port] and Mail Settings[auth] parameters of the /admin/configuration.php.

Ссылки

https://github.com/CrownZTX/reflectedxss1
Exploit
Third Party Advisory
https://github.com/CrownZTX/reflectedxss1
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:geeklog:geeklog:2.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00161

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-93q5-5r2r-wj2h

CVSS3: 4.8

github

больше 2 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail Settings[backend], Mail Settings[host], Mail Settings[port] and Mail Settings[auth] parameters of the /admin/configuration.php.

EPSS

Процентиль: 37%

0.00161

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79