Design/Logic Flaw

2018-09-0815:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

An issue is discovered in baijiacms V4. XSS exists via the assets/weengine/components/zclip/ZeroClipboard.swf id parameter, aka “Non-standard use of the flash component.”

CPENameOperatorVersion
baijiacmseq4.0

CPE	Name	Operator	Version
	baijiacms	eq	4.0

References

github.com/xxy961216/attack-baijiacmsV4-with-xss