CVE-2010-3483

2022-10-0316:20:57

mitre

www.cve.org

cms vulnerability

access control

administrative privileges

cross-site scripting

6.2 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.4%

JSON

cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. NOTE: this vulnerability can be leveraged to conduct cross-site scripting attacks, as demonstrated using the (1) title, (2) content, and (3) menutitle parameters.