PT-2015-7361
CVE-2015-6805
·
تاريخ النشر
2015-09-02
·
تاريخ التحديث
2016-12-22
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
MDC Private Message plugin version 1.0.0
Description
A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the
message field in a private message. This could potentially lead to unauthorized actions on the website.Recommendations
For MDC Private Message plugin version 1.0.0, consider disabling the private messaging functionality until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to the private message feature to minimize the risk of unauthorized script injection.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾