PT-2022-11719
CVE-2021-42867
·
تاريخ النشر
2022-03-31
·
تاريخ التحديث
2022-04-07
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
DanPros htmly version 2.8.1
Description
A Cross Site Scripting (XSS) issue exists via the
Description field in the "admin/config" and "index.php" pages.Recommendations
For DanPros htmly version 2.8.1, consider restricting access to the
Description field in the affected pages until a patch is available. As a temporary workaround, avoid using the Description field in the "admin/config" and "index.php" pages to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾