PT-2018-5259
CVE-2017-1000495
·
Publicado
2018-01-03
·
Atualizado
2022-05-14
Descrição por
CVSS 3.1
5.4
MédiaMétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
QuickApps CMS version 2.0.0
Description
The issue allows for Stored Cross-site Scripting in the user's real name field, which can result in denial of service and enable unauthorized actions to be performed with an administrator user's account.
Recommendations
For QuickApps CMS version 2.0.0, update to a version that fixes the Stored Cross-site Scripting issue in the user's real name field to prevent denial of service and unauthorized actions.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾