PT-2018-12811 · My Little Forum · My Little Forum

CVE-2018-14936

·

Publicado

2018-08-05

·

Atualizado

2024-02-14

CVSS v3.1

4.8

Média

VetorAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions my little forum version 2.4.12
Description The issue allows for XSS via the Title field in the Add page option.
Recommendations For my little forum version 2.4.12, update to a version that fixes this issue, if available. As a temporary workaround, consider validating and sanitizing user input in the Title field to prevent XSS attacks.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-14936

Produtos afetados

My Little Forum