CVE-2012-1224

2022-10-0316:15:27

mitre

www.cve.org

contentlion

xss

vulnerability

path_info

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

References

osvdb.org/78833

www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt