Cross site scripting

2023-06-2721:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

vulnerability

espcms

arbitrary code

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows arbitrary code to be executed via the title parameter.

CPENameOperatorVersion
espcmseq8.18101601.112

CPE	Name	Operator	Version
	espcms	eq	8.18101601.112

References

github.com/source-hunter/espcms/issues/1