Cross site scripting

2023-02-0318:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

tpcms 3.2

arbitrary code

0.001 Low

EPSS

Percentile

30.5%

JSON

Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg_copyright or cfg_tel field in Site Configuration page.

CPENameOperatorVersion
tpcmseq3.2

CPE	Name	Operator	Version
	tpcms	eq	3.2

References

gitee.com/happy_source/tpcms/issues/I3YUCJ

0.001 Low

EPSS

Percentile

30.5%

JSON

Related for PRION:CVE-2021-36545