Описание
WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.
Ссылки
- Product
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wbce:wbce_cms:1.6.1:-:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00034
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-601
Связанные уязвимости
CVSS3: 5.4
github
около 2 месяцев назад
WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrokes. Attackers can upload a crafted HTML file with CSS-based keylogging techniques to intercept password characters through background image requests.
EPSS
Процентиль: 10%
0.00034
Низкий
5.4 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-601