Cross site scripting

2017-03-0520:59:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.9%

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).

CPENameOperatorVersion
mangoswebv4lt4.0.8

CPE	Name	Operator	Version
	mangoswebv4	lt	4.0.8

References

www.securityfocus.com/bid/96584

github.com/paintballrefjosh/MaNGOSWebV4/issues/15

github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8

0.001 Low

EPSS

Percentile

44.9%

Related for PRION:CVE-2017-6478