Cross site scripting

2023-06-0107:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

sea75300 fanpress cm

cross site scripting

template preview

upgrade

remote attack

patch

c380d343c2107fcee55ab00eb8d189ce5e03369b

version 3.6.4

nvd

0.001 Low

EPSS

Percentile

47.7%

JSON

A vulnerability was found in sea75300 FanPress CM up to 3.6.3. It has been classified as problematic. This affects the function getArticlesPreview of the file inc/controller/action/system/templatepreview.php of the component Template Preview. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.6.4 is able to address this issue. The patch is named c380d343c2107fcee55ab00eb8d189ce5e03369b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230235.

CPENameOperatorVersion
fanpress_cmge3.6.0
fanpress_cmle3.6.3

CPE	Name	Operator	Version
	fanpress_cm	ge	3.6.0
	fanpress_cm	le	3.6.3

References

github.com/sea75300/fanpresscm3/commit/c380d343c2107fcee55ab00eb8d189ce5e03369b

github.com/sea75300/fanpresscm3/releases/tag/v3.6.4

vuldb.com/?ctiid.230235

vuldb.com/?id.230235

0.001 Low

EPSS

Percentile

47.7%

JSON

Related for PRION:CVE-2018-25086