PT-2024-27117 · Unknown · Lylme Spage
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
LyLme spage version 1.9.5
Description
The issue is related to Cross Site Scripting (XSS) and can be exploited via the admin/link.php endpoint. This means an attacker could potentially inject malicious scripts into the website, affecting users who access the page.
Recommendations
For LyLme spage version 1.9.5, consider disabling access to the admin/link.php endpoint until a patch is available to prevent potential XSS attacks.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lylme Spage