PT-2021-17600
CVE-2021-27677
·
تاريخ النشر
2021-03-11
·
تاريخ التحديث
2021-03-12
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Batflat CMS version 1.3.6
Description
The issue allows remote attackers to inject arbitrary web script or HTML via the
field name variable, potentially leading to cross-site scripting (XSS) attacks. This could enable attackers to execute malicious scripts on the victim's browser.Recommendations
For Batflat CMS version 1.3.6, update to a version that fixes the XSS vulnerability in Galleries, ensuring that user input in the
field name is properly sanitized to prevent code injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾