Cross site scripting

2017-08-0205:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.4%

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.

CPENameOperatorVersion
xoopseq2.5.8

CPE	Name	Operator	Version
	xoops	eq	2.5.8

References

www.securityfocus.com/bid/100094

github.com/XOOPS/XoopsCore25/issues/524