Cross site scripting

2012-02-2113:31:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Cross-site scripting (XSS) vulnerability in system/classes/login.php in ContentLion Alpha 1.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

CPENameOperatorVersion
contentlion_alphaeq1.3

CPE	Name	Operator	Version
	contentlion_alpha	eq	1.3

References

osvdb.org/78833

www.darksecurity.de/advisories/2012/SSCHADV2012-004.txt