Lucene search

K
jvnJapan Vulnerability NotesJVN:46874970
HistoryMar 25, 2024 - 12:00 a.m.

JVN#46874970: 0ch BBS Script (0ch) vulnerable to cross-site scripting

2024-03-2500:00:00
Japan Vulnerability Notes
jvn.jp
14
jvn#46874970
0ch bbs script
cross-site scripting
arbitrary script execution
zerochannel
bulletin board software

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

0ch BBS Script (0ch) (according to the original report submitted by the reporter) <http://0ch.mine.nu/&gt; provided by Zerochannel (according to the original report submitted by the reporter) is bulletin board software.
0ch BBS Script (0ch) contains a cross-site scripting vulnerability (CWE-79).

Impact

An arbitrary script may be executed on the web browser of the user accessing the website that uses the product.

Solution

Consider stop using 0ch BBS Script (0ch) (test070124.zip)
Since the developer was unreachable, existence of any mitigations is unknown.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for JVN:46874970