Cross site scripting

2017-11-1701:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

WBCE v1.1.11 is vulnerable to reflected XSS via the “begriff” POST parameter in /admin/admintools/tool.php?tool=user_search

CPENameOperatorVersion
wbce_cmseq1.1.11

CPE	Name	Operator	Version
	wbce_cms	eq	1.1.11

References

github.com/WBCE/WBCE_CMS/commit/0da620016aec17ac2d2f3a22c55ab8c2b55e691e