Описание
Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in the Meta & Custom Tags Menu.
Ссылки
- ExploitProductThird Party Advisory
- ExploitProductThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:e107:e107_cms:2.3.2:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.0039
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
больше 2 лет назад
Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in the Meta & Custom Tags Menu.
EPSS
Процентиль: 60%
0.0039
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
CWE-79