CVE-2018-1999021

N/A

Beschreibung

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in Inject arbitrary web script or HTML via the profile page editor. This attack appear to be exploitable via The victim must navigate to the attacker's profile page.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht7/23/2018

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

gleeztech:gleezcms

Schwachen (CWE)

CWE-79

Referenzen

https://github.com/gleez/cms/issues/797(cve@mitre.org)

https://github.com/gleez/cms/issues/797(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.