Описание
Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.10 (включая)
cpe:2.3:a:alma:alma_blog:*:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00089
Низкий
5.8 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.8
github
почти 2 года назад
Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.
EPSS
Процентиль: 25%
0.00089
Низкий
5.8 Medium
CVSS3
6.1 Medium
CVSS3
Дефекты
CWE-79