PT-2020-15210
CVE-2020-19884
·
تاريخ النشر
2020-08-24
·
تاريخ التحديث
2020-08-25
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
DBHcms version 1.2.0
Description
The issue is related to a stored XSS vulnerability due to the absence of the htmlspecialchars function in the dbhcmsmodmod.domain.edit.php file at line 119.
Recommendations
For DBHcms version 1.2.0, consider adding the htmlspecialchars function to the dbhcmsmodmod.domain.edit.php file at line 119 to prevent XSS attacks. As a temporary workaround, restrict access to the mod.domain.edit.php module to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾