Cross site scripting

2021-08-1603:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

In ocProducts Composr CMS before 10.0.38, an attacker can inject JavaScript via the staff_messaging messaging system for XSS.

CPENameOperatorVersion
composr_cmslt10.0.38

CPE	Name	Operator	Version
	composr_cms	lt	10.0.38

References

compo.sr/news/view/announcements/two-new-xss-security.htm