Lucene search

K
prionPRIOn knowledge basePRION:CVE-2012-3872
HistoryDec 28, 2012 - 11:48 a.m.

Cross site scripting

2012-12-2811:48:00
PRIOn knowledge base
www.prio-n.com
2

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrary web script or HTML via (1) the result parameter to data/file/edit.php, (2) the q parameter to confirm.php, or (3) the keyword parameter to users/users.php.

CPENameOperatorVersion
openconstructoreq3.12.0

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

Related for PRION:CVE-2012-3872