Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-7465
HistoryApr 26, 2018 - 7:29 p.m.

Cross site scripting

2018-04-2619:29:00
PRIOn knowledge base
www.prio-n.com
3

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by simply adding </textarea> to the value and saving the product/config. By editing back the product/config, the editor’s browser will execute everything after the </textarea>, leading to a possible XSS.

CPENameOperatorVersion
virtuemartlt3.2.14

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%