Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-27625

Опубликовано: 05 мар. 2024
Источник: nvd
CVSS3: 4.8
EPSS Низкий

Описание

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.19:*:*:*:*:*:*:*

EPSS

Процентиль: 24%
0.00081
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
github
почти 2 года назад

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

EPSS

Процентиль: 24%
0.00081
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79