Cross site scripting

2023-01-2919:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

capnsquarepants wordcraft

cross site scripting

remote attack

version 0.7

patch

upgrade

vdb-219714

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 is able to address this issue. The patch is identified as be23028633e8105de92f387036871c03f34d3124. It is recommended to upgrade the affected component. VDB-219714 is the identifier assigned to this vulnerability.