PT-2020-13132
CVE-2020-12472
·
تاريخ النشر
2020-04-29
·
تاريخ التحديث
2020-05-04
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
MonoX versions 5.1.40.5152 and earlier
Description
The issue allows stored XSS via
User Status, Blog Comments, or Blog Description. This can lead to malicious script execution when a user views the affected content.Recommendations
For MonoX versions 5.1.40.5152 and earlier, consider disabling the
User Status, Blog Comments, and Blog Description features until a patch is available to prevent stored XSS attacks. Restrict access to these features to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾