Cross site scripting

2021-05-1023:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.

CPENameOperatorVersion
nonecmseq1.3.0

CPE	Name	Operator	Version
	nonecms	eq	1.3.0

References

github.com/nangge/noneCms/issues/32