Lucene search
HistoryOct 21, 2015 - 3:59 p.m.
CVE-2015-7822
cve
2015
7822
xss
vulnerabilities
kentico cms
remote attackers
web script
html
cmsmodules
admincontrols
pages
uipage.aspx
cmsbodyclass
cookie
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.3%
Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBodyClass cookie variable to the default URI.
Affected configurations
Node
kenticokentico_cmsMatch8.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| kentico:kentico_cms | kentico kentico cms | eq | 8.2 |
Related
nvd
nvd
CVE-2015-7822
2015-10-21 15:59:01
prion
prion
Cross site scripting
2015-10-21 15:59:00
cvelist
cvelist
CVE-2015-7822
2015-10-21 15:00:00
packetstorm
packetstorm
Kentico CMS 8.2 Cross Site Scripting / Open Redirect
2015-10-15 00:00:00
nessus
nessus
Kentico CMS < 8.2.42 Multiple Vulnerabilities
2020-10-07 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.3%
Related for CVE-2015-7822