Lucene search
AttackerKBAKB:FC9E0ABC-CAFB-4F50-9362-44285D1412FDHistoryAug 12, 2021 - 12:00 a.m.
CVE-2021-38603
2021-08-1200:00:00
attackerkb.com
16
PluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.
Recent assessments:
nu11secur1ty at August 13, 2021 11:57am UTC reported:
Link: <https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38603>
Vulnerability parameter in profil.php “id_content”
NOTE: The same problem is in the demo account in the online version
<https://www.softaculous.com/softaculous/demos/PluXml>
Proof: <https://streamable.com/5rf36u>
Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 5
Related
githubexploit
githubexploit
Exploit for Cross-site Scripting in Pluxml
2021-08-12 21:08:54
debiancve
debiancve
CVE-2021-38603
2021-08-12 23:15:00
cve
cve
CVE-2021-38603
2021-08-12 23:15:00
prion
prion
Cross site scripting
2021-08-12 23:15:00
ubuntucve
ubuntucve
CVE-2021-38603
2021-08-12 00:00:00
packetstorm
packetstorm
PluXML 5.8.7 Cross Site Scripting
2021-08-13 00:00:00
osv
osv
CVE-2021-38603
2021-08-12 23:15:09
Related for AKB:FC9E0ABC-CAFB-4F50-9362-44285D1412FD