Lucene search

Japan Vulnerability NotesJVN:61054671

HistoryMay 10, 2024 - 12:00 a.m.

JVN#61054671: Phormer vulnerable to cross-site scripting

2024-05-1000:00:00

Japan Vulnerability Notes

jvn.jp

jvn#61054671

phormer

cross-site scripting

cwe-79

web browser

software update

developer

support

version 3.35

products affected

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Phormer contains a cross-site scripting vulnerability (CWE-79).

Impact

An arbitrary script may be executed on the web browser of the user.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.
Phormer version 3.35 was released to fix this issue.

The developer states that the project already ended in 2007, no support available now.

Products Affected

Phormer prior to version 3.35