Описание
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.4 allows remote authenticated attackers to inject arbitrary web script or HTML via the default_keywords crafted parameter. This vulnerability is fixed in 2.2.4.
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.4 (исключая)
cpe:2.3:a:namelessmc:nameless:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00032
Низкий
7.2 High
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
EPSS
Процентиль: 9%
0.00032
Низкий
7.2 High
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79