Описание
Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages. Attackers can craft malicious image source and onerror attributes to execute arbitrary JavaScript code in victim's browser.
Ссылки
- Product
- ExploitThird Party AdvisoryVDB Entry
- Third Party AdvisoryExploit
- ExploitThird Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:zomp:zomplog:3.9:*:*:*:*:*:*:*
EPSS
Процентиль: 8%
0.0003
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
около 2 месяцев назад
Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages. Attackers can craft malicious image source and onerror attributes to execute arbitrary JavaScript code in victim's browser.
EPSS
Процентиль: 8%
0.0003
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79