PT-2021-3446

CVE-2021-32106

·

تاريخ النشر

2021-06-08

·

تاريخ التحديث

2021-09-16

الوصف من

CVSS 2.0
5.5
متوسطة
المقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions ICEcoder version 8.0
Description A reflected XSS issue was identified in the multipe-results.php page due to insufficient sanitization of the replace variable. This allows arbitrary Javascript code to be executed, potentially enabling remote attackers to perform cross-site scripting attacks.
Recommendations For ICEcoder version 8.0, consider disabling access to the multipe-results.php page or restricting the use of the replace variable until a patch is available. Additionally, ensure proper sanitization of user input to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-JF9V-Q8VH-3FMC
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾