PT-2023-24995 · Unknown · Simplephpscripts Event Script
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SimplePHPscripts Event Script version 2.1
Description
A vulnerability was found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack may be launched remotely.
Recommendations
For version 2.1, it is recommended to upgrade the affected component. As a temporary workaround, consider restricting access to the preview.php file until a patch is available.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Simplephpscripts Event Script