PT-2016-4620 · Basercms · Basercms Menubook Plugin
CVE-2016-1173
·
Publicado
2016-04-06
·
Atualizado
2016-04-07
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
baserCMS Menubook plugin versions prior to 0.9.3
Description
The issue is related to a cross-site scripting (XSS) vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to unauthorized access or control over user sessions.
Recommendations
For versions prior to 0.9.3, update to version 0.9.3 or later to resolve the issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Basercms Menubook Plugin