Cross site scripting

2019-10-2919:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

48.5%

JSON

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.

CPENameOperatorVersion
fabrikle3.8.1

CPE	Name	Operator	Version
	fabrik	le	3.8.1

References

github.com/Fabrik/fabrik/issues/2033

0.001 Low

EPSS

Percentile

48.5%

JSON

Related for PRION:CVE-2018-10727