exploitDog

CVE-2024-25381

Опубликовано: 21 фев. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.

Ссылки

https://github.com/Ox130e07d/CVE-2024-25381/blob/main/description
Third Party Advisory
https://github.com/emlog/emlog/issues/285
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Ox130e07d/CVE-2024-25381/blob/main/description
Third Party Advisory
https://github.com/emlog/emlog/issues/285
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:emlog:emlog:2.2.8:*:*:*:pro:*:*:*

EPSS

Процентиль: 26%

0.00092

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-p8w6-qgpq-8mqq

CVSS3: 6.1

github

почти 2 года назад

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content.

EPSS

Процентиль: 26%

0.00092

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79