Cross site scripting

2018-12-1318:29:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.

CPENameOperatorVersion
fuel_cmseq1.4.3

CPE	Name	Operator	Version
	fuel_cms	eq	1.4.3

References

github.com/CCCCCrash/POCs/tree/master/Web/fuel-cms/xss2