Design/Logic Flaw

2018-01-1009:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

33.5%

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.

CPENameOperatorVersion
discuzxeq3.4.120

CPE	Name	Operator	Version
	discuzx	eq	3.4.120

References

www.whsgwl.net/text.php?textid=32

0.001 Low

EPSS

Percentile

33.5%

Related for PRION:CVE-2018-5331