Cross site scripting

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

zblogcn

zblogphp

vulnerability

crafted payload

module management

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

Cross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to execute arbitrary code via a crafted payload in title parameter of the module management model.

CPENameOperatorVersion
zblogphpeq1.0

CPE	Name	Operator	Version
	zblogphp	eq	1.0

References

github.com/zblogcn/zblogphp/issues/262