Design/Logic Flaw

2018-04-2614:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

Composr CMS 10.0.13 has XSS via the site_name parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php.

CPENameOperatorVersion
composr_cmseq10.0.13

CPE	Name	Operator	Version
	composr_cms	eq	10.0.13

References

github.com/faizzaidi/Composr-CMS-10.0.13-Cross-Site-Scripting-XSS