CVE-2015-7777

2015-11-2111:00:00

jpcert

www.cve.org

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Cross-site scripting (XSS) vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web script or HTML via a crafted URI.

References

jvn.jp/en/jp/JVN20649799/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000184

github.com/josephernest/void/commit/84b9615ae7fe233c40a80bf749085caaef6f4919