Cross site scripting

2018-11-1116:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886.

CPENameOperatorVersion
jeesnseq1.3

CPE	Name	Operator	Version
	jeesns	eq	1.3

References

github.com/zchuanzhao/jeesns/issues/6

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2018-19178