Cross site scripting

2021-10-0421:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.9%

JSON

A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.

CPENameOperatorVersion
xiunobbseq4.0.4

CPE	Name	Operator	Version
	xiunobbs	eq	4.0.4

References

gitee.com/xiuno/xiunobbs/issues/I16BI3

github.com/wanghaiwei/xiuno-docker/issues/5

0.001 Low

EPSS

Percentile

32.9%

JSON

Related for PRION:CVE-2020-21496