Количество 2
Количество 2
CVE-2021-25969
In Camaleon CMS application, versions 0.0.1 to 2.6.0 are vulnerable to stored XSS, that allows an unauthenticated attacker to store malicious scripts in the comments section of the post. These scripts are executed in a victim’s browser when they open the page containing the malicious comment.
GHSA-x78v-4fvj-rg9j
Camaleon CMS Stored Cross-site Scripting vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-25969 In Camaleon CMS application, versions 0.0.1 to 2.6.0 are vulnerable to stored XSS, that allows an unauthenticated attacker to store malicious scripts in the comments section of the post. These scripts are executed in a victim’s browser when they open the page containing the malicious comment. | CVSS3: 6.1 | 2% Низкий | больше 4 лет назад | |
GHSA-x78v-4fvj-rg9j Camaleon CMS Stored Cross-site Scripting vulnerability | CVSS3: 6.1 | 2% Низкий | больше 3 лет назад |
Уязвимостей на страницу