PT-2023-28749 · Emlog Pro · Emlog Pro
CVE-2023-43267
·
Publicado
2023-09-29
·
Atualizado
2023-10-04
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
emlog pro version 2.1.14
Description
A cross-site scripting (XSS) issue in the publish article function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the
title field.Recommendations
For emlog pro version 2.1.14, consider disabling the publish article function until a patch is available to prevent exploitation of this issue. Restrict access to the title field in the publish article function to minimize the risk of arbitrary web script or HTML execution.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Emlog Pro