Количество 2
Количество 2
CVE-2024-48228
больше 1 года назад
An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).
CVSS3: 6.1
EPSS: Низкий
GHSA-j9wp-x5q5-xh2f
больше 1 года назад
Funadmin Cross-site Scripting vulnerability
CVSS3: 6.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-48228 An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS). | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
| GHSA-j9wp-x5q5-xh2f Funadmin Cross-site Scripting vulnerability | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу
20