PT-2021-3446
CVE-2021-32106
·
تاريخ النشر
2021-06-08
·
تاريخ التحديث
2021-09-16
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ICEcoder version 8.0
Description
A reflected XSS issue was identified in the multipe-results.php page due to insufficient sanitization of the
replace variable. This allows arbitrary Javascript code to be executed, potentially enabling remote attackers to perform cross-site scripting attacks.Recommendations
For ICEcoder version 8.0, consider disabling access to the multipe-results.php page or restricting the use of the
replace variable until a patch is available. Additionally, ensure proper sanitization of user input to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾