Cross site scripting

2013-08-0921:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php.

CPENameOperatorVersion
anchor_cmseq0.9.1

CPE	Name	Operator	Version
	anchor_cms	eq	0.9.1

References

www.securityfocus.com/bid/61376

exchange.xforce.ibmcloud.com/vulnerabilities/85888

www.exploit-db.com/exploits/26958