Design/Logic Flaw

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

hfish 0.5.1

xss code

administrator view

design flaw

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when the administrator views the information.

CPENameOperatorVersion
hfisheq0.5.1

CPE	Name	Operator	Version
	hfish	eq	0.5.1

References

github.com/hacklcx/HFish/issues/61