PT-2022-24053 · Ftcms · Ftcms
CVE-2022-37731
·
Published
2022-09-07
·
Updated
2022-09-13
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
ftcms version 2.1
Description
The issue allows an attacker to insert malicious JavaScript code into the web page, causing the user or administrator to trigger malicious code when accessing. This is a result of a XSS vulnerability in the poster.PHP file.
Recommendations
For ftcms version 2.1, consider disabling the poster.PHP file or restricting access to it until a fix is available to prevent exploitation of the XSS vulnerability.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ftcms