Cross site scripting

2022-01-1318:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

39.8%

JSON

A cross-site scripting (XSS) vulnerability in the “Zip content” feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames.

CPENameOperatorVersion
http_commandereq3.1.9

CPE	Name	Operator	Version
	http_commander	eq	3.1.9

References

www.element-it.com/products.aspx

www.exploit-db.com/exploits/50645

0.001 Low

EPSS

Percentile

39.8%

JSON

Related for PRION:CVE-2021-40813