CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
25.6%
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.
Vendor | Product | Version | CPE |
---|---|---|---|
sitekiosk | sitekiosk | 4.9.11 | cpe:2.3:a:sitekiosk:sitekiosk:4.9.11:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 4.9.14 | cpe:2.3:a:sitekiosk:sitekiosk:4.9.14:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 4.96 | cpe:2.3:a:sitekiosk:sitekiosk:4.96:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 4.96.0 | cpe:2.3:a:sitekiosk:sitekiosk:4.96.0:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 4.96.3 | cpe:2.3:a:sitekiosk:sitekiosk:4.96.3:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 4.97.0 | cpe:2.3:a:sitekiosk:sitekiosk:4.97.0:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 5.0.19 | cpe:2.3:a:sitekiosk:sitekiosk:5.0.19:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 5.0.26 | cpe:2.3:a:sitekiosk:sitekiosk:5.0.26:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 5.0.32 | cpe:2.3:a:sitekiosk:sitekiosk:5.0.32:*:*:*:*:*:*:* |
sitekiosk | sitekiosk | 5.0.35 | cpe:2.3:a:sitekiosk:sitekiosk:5.0.35:*:*:*:*:*:*:* |