Cross site scripting

2021-10-1512:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.2%

JSON

Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack.

CPENameOperatorVersion
easytest_online_learning_test_platformeq1705

CPE	Name	Operator	Version
	easytest_online_learning_test_platform	eq	1705

References

www.twcert.org.tw/tw/cp-132-5206-3cd3f-1.html