PT-2018-5259
CVE-2017-1000495
·
Published
2018-01-03
·
Updated
2022-05-14
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
QuickApps CMS version 2.0.0
Description
The issue allows for Stored Cross-site Scripting in the user's real name field, which can result in denial of service and enable unauthorized actions to be performed with an administrator user's account.
Recommendations
For QuickApps CMS version 2.0.0, update to a version that fixes the Stored Cross-site Scripting issue in the user's real name field to prevent denial of service and unauthorized actions.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾