Cross site scripting

2021-10-0121:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.6%

JSON

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.

CPENameOperatorVersion
jizhicmseq1.5.1

CPE	Name	Operator	Version
	jizhicms	eq	1.5.1

References

jizhicms.com

github.com/Cherry-toto/jizhicms

github.com/Cherry-toto/jizhicms/issues/16

0.001 Low

EPSS

Percentile

36.6%

JSON

Related for PRION:CVE-2020-21228