PT-2023-13554 · Webcube · Webcube
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WeCube platform version 3.2.2
Description
A DOM XSS issue has been found on the plugin database execution page. This allows for potential exploitation through malicious scripts executed on the client-side.
Recommendations
For WeCube platform version 3.2.2, consider disabling access to the plugin database execution page until a patch is available. Restrict the use of the plugin database execution functionality to minimize the risk of exploitation.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Webcube