Lucene search

[email protected]CVE-2018-16374

HistorySep 03, 2018 - 12:29 a.m.

CVE-2018-16374

2018-09-0300:29:00

CWE-79

[email protected]

web.nvd.nist.gov

frog cms

stored xss

admin page

plugin

comment

settings

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings.

Affected configurations

NVD

Node

frog_cms_projectfrog_cmsMatch0.9.5

CPENameOperatorVersion
frog_cms_project:frog_cmsfrog cms project frog cmseq0.9.5

CPE	Name	Operator	Version
frog_cms_project:frog_cms	frog cms project frog cms	eq	0.9.5

References

github.com/philippe/FrogCMS/issues/14

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Related for CVE-2018-16374

prion1 cvelist1 nvd1