Cross site scripting

2008-04-2519:05:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.1%

JSON

Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
site_designerle1.0.13

CPE	Name	Operator	Version
	site_designer	le	1.0.13

References

jira.magnolia.info/browse/MGNLSD-175

secunia.com/advisories/29918

www.securityfocus.com/bid/28897

exchange.xforce.ibmcloud.com/vulnerabilities/41962