PT-2025-31911 · Unknown · Atjiu Pybbs
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
atjiu pybbs versions prior to 6.0.0
Description
A vulnerability exists in atjiu pybbs up to version 6.0.0, affecting an unknown functionality within the
/admin/topic/list file. Manipulation of the username parameter can lead to cross site scripting (XSS). The attack can be launched remotely. The exploit has been publicly disclosed.Recommendations
Apply the patch named 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22 to resolve this issue.
Exploit
Correção
XSS
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Atjiu Pybbs