Cross site scripting

2018-09-1602:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed.

CPENameOperatorVersion
yiqicmseq<= 20161120

CPE	Name	Operator	Version
	yiqicms	eq	<= 20161120

References

github.com/wacj1425/yiqicms/issues/1