Lucene search

K
cveMitreCVE-2021-31280
HistoryJun 14, 2023 - 2:15 p.m.

CVE-2021-31280

2023-06-1414:15:09
CWE-79
mitre
web.nvd.nist.gov
17
cve-2021-31280
tp5cms
xss
admin.php
system set.html
nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.7%

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter.

Affected configurations

Nvd
Node
tp5cms_projecttp5cmsRange2017-05-25
VendorProductVersionCPE
tp5cms_projecttp5cms*cpe:2.3:a:tp5cms_project:tp5cms:*:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

23.7%

Related for CVE-2021-31280