Cross site scripting

2022-04-1021:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.0%

JSON

A cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comment text box.

CPENameOperatorVersion
ofcmseq1.1.4

CPE	Name	Operator	Version
	ofcms	eq	1.1.4

References

gitee.com/oufu/ofcms/issues/I4Z8QU

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for PRION:CVE-2022-27961