Cross site scripting

2018-10-1016:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

28.7%

XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.

CPENameOperatorVersion
dilicmseq2.4.0

CPE	Name	Operator	Version
	dilicms	eq	2.4.0

References

github.com/chekun/DiliCMS/issues/59

0.001 Low

EPSS

Percentile

28.7%

Related for PRION:CVE-2018-18209