Cross site scripting

2018-12-2123:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

48.5%

JSON

Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).

CPENameOperatorVersion
jenzabarge8.2.1
jenzabarle9.2.0

CPE	Name	Operator	Version
	jenzabar	ge	8.2.1
	jenzabar	le	9.2.0

References

metamorfosec.com/Files/Advisories/METS-2018-004-A_XSS_Vulnerability_in_Jenzabar_8.2.1_to_9.2.0.txt

0.001 Low

EPSS

Percentile

48.5%

JSON

Related for PRION:CVE-2018-16778