Cross site scripting

2021-10-0816:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.9%

JSON

TadTools special page parameter does not properly restrict the input of specific characters, thus remote attackers can inject JavaScript syntax without logging in, and further perform reflective XSS attacks.

CPENameOperatorVersion
tadtoolslt3.2.2

CPE	Name	Operator	Version
	tadtools	lt	3.2.2

References

www.twcert.org.tw/tw/cp-132-5169-327ef-1.html