PT-2021-10538
CVE-2020-20700
·
تاريخ النشر
2021-07-27
·
تاريخ التحديث
2021-08-03
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
S-CMS PHP version 3.0
Description:
A stored cross site scripting (XSS) issue exists, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the
Title Entry text box in the /app/form add/ endpoint.Recommendations:
For S-CMS PHP version 3.0, update the software to remove the stored XSS vulnerability in the
/app/form add/ endpoint, specifically ensuring that user input in the Title Entry text box is properly sanitized to prevent the execution of arbitrary web scripts or HTML. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾