Design/Logic Flaw

2018-10-1421:29:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

DISPUTED An issue was discovered in nc-cms through 2017-03-10. index.php?action=edit_html&name=home_content allows XSS via the HTML Source Editor. NOTE: the vendor disputes this because the form requires administrator privileges, and entering JavaScript is supported functionality.

CPENameOperatorVersion
nc-cmseq<= 2017310

CPE	Name	Operator	Version
	nc-cms	eq	<= 2017310

References

github.com/gnat/nc-cms/issues/9