Lucene search

K
osvGoogleOSV:GHSA-39VM-RVWH-Q86J
HistoryMay 14, 2022 - 2:42 a.m.

ImpressCMS Cross-site Scripting vulnerability via quicksearch_ContentContent parameter

2022-05-1402:42:14
Google
osv.dev
7

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before 1.2.4, allows remote attackers to inject arbitrary web script or HTML via the quicksearch_ContentContent parameter.

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

Related for OSV:GHSA-39VM-RVWH-Q86J