Cross site scripting

2014-05-1419:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list or (2) introduce parameter to index.php.

References

osvdb.org/98886

packetstormsecurity.com/files/123746/PHPCMS-Guestbook-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2013/Oct/187