Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-91649
HistoryNov 03, 2021 - 12:00 a.m.

xujinliang zibbs cross-site scripting vulnerability

2021-11-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
zibbs
forum
cross-site scripting
vulnerability
bootstrap
php
index.php
arbitrary code
filtering

EPSS

0.002

Percentile

53.9%

Zibbs (Zibbs Forum) is a Bootstrap-based Php light forum system. xujinliang zibbs version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of the route parameter in index.php. An attacker could use this vulnerability to execute arbitrary code.

EPSS

0.002

Percentile

53.9%

Related for CNVD-2021-91649