Cross site scripting

2022-04-0719:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

40.7%

A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp.

CPENameOperatorVersion
xmalleq<= 2021117

CPE	Name	Operator	Version
	xmall	eq	<= 2021117

References

exrick.com

github.com/Exrick/xmall

github.com/Exrick/xmall/blob/b146cceb21ca42d4237f31dbd7af5ced49048a56/xmall-manager-web/src/main/webapp/WEB-INF/jsp/product-add.jsp

0.001 Low

EPSS

Percentile

40.7%

Related for PRION:CVE-2021-43432