Cross site scripting

2020-09-1513:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.9%

JSON

A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter

CPENameOperatorVersion
elkarbackupeq1.3.3

CPE	Name	Operator	Version
	elkarbackup	eq	1.3.3

References

github.com/sooraj24/new/blob/master/XSS%20in%20ElkarBackup

vyshnavvizz.blogspot.com/2020/09/stored-cross-site-scripting-in.html

www.elkarbackup.org/

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for PRION:CVE-2020-24924