PT-2023-30259 · Jspxcms · Jspxcms
CVE-2023-46911
·
Publicado
2023-11-01
·
Atualizado
2023-11-08
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Jspxcms version 10.2.0
Description
There is a Cross Site Scripting (XSS) issue in the "choose style tree.do" interface of the backend. This affects the ability to securely interact with the system, potentially allowing malicious scripts to be executed.
Recommendations
For Jspxcms version 10.2.0, consider disabling access to the "choose style tree.do" interface until a patch is available to prevent potential exploitation.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Jspxcms