Cross site scripting

2019-07-0820:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

41.8%

JSON

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

CPENameOperatorVersion
wikindxlt5.8.1

CPE	Name	Operator	Version
	wikindx	lt	5.8.1

References

sourceforge.net/p/wikindx/code/2787

sourceforge.net/p/wikindx/code/2788

sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/

0.001 Low

EPSS

Percentile

41.8%

JSON

Related for PRION:CVE-2019-12930