Cross site scripting

2023-01-0410:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

kkokko neoxplora

trainer handler

remote attack

cross site scripting

patch

identifier

nvd

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.5%

JSON

A vulnerability, which was classified as problematic, has been found in kkokko NeoXplora. Affected by this issue is some unknown functionality of the component Trainer Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217352.

CPENameOperatorVersion
neoxploraeq< 2014930

CPE	Name	Operator	Version
	neoxplora	eq	< 2014930

References

github.com/kkokko/NeoXplora/commit/dce1aecd6ee050a29f953ffd8f02f21c7c13f1e6

vuldb.com/?ctiid.217352

vuldb.com/?id.217352