PT-2023-32345
CVE-2023-5811
·
تاريخ النشر
2023-10-27
·
تاريخ التحديث
2024-06-04
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:N/AC:L/Au:M/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
flusity CMS (affected versions not specified)
Description
A problematic issue was found in the function
loadPostAddForm of the file core/tools/posts.php, where the manipulation of the argument menu id leads to cross-site scripting. This issue can be exploited remotely.Recommendations
Apply a patch to fix this issue. As a temporary workaround, consider restricting access to the
loadPostAddForm function in the core/tools/posts.php file until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾