Cross site scripting

2019-01-0319:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.0%

JSON

The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the “Reports > Reports” name field.

CPENameOperatorVersion
cuba_platformle6.10.7
reportingeq<= 201912

CPE	Name	Operator	Version
	cuba_platform	le	6.10.7
	reporting	eq	<= 201912

References

github.com/cuba-platform/reports/issues/140

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for PRION:CVE-2018-20663