Design/Logic Flaw

2017-06-1206:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.

CPENameOperatorVersion
bigtree_cmsle4.2.18

CPE	Name	Operator	Version
	bigtree_cms	le	4.2.18

References

github.com/bigtreecms/BigTree-CMS/issues/298