Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-77808
HistoryMay 24, 2022 - 12:00 a.m.

Popcorn Time Cross-Site Scripting Vulnerability

2022-05-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
popcorn time
bittorrent client
cross-site scripting
vulnerability
data validation
api server
operating system commands

EPSS

0.001

Percentile

21.8%

Popcorn Time is a multi-platform BitTorrent client. version 0.4.7 of Popcorn Time is vulnerable to a cross-site scripting vulnerability that originates in the setting page Movies API Server(s) fieldโ€™s lack of data validation filtering for user-supplied data and output. An attacker could exploit the vulnerability to run operating system commands.

EPSS

0.001

Percentile

21.8%

Related for CNVD-2022-77808