Cross site scripting

2018-04-2215:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.0%

JSON

Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.

CPENameOperatorVersion
discuzxeq<= x3.4

CPE	Name	Operator	Version
	discuzx	eq	<= x3.4

References

laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS/

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for PRION:CVE-2018-10298