Cross site scripting

2023-02-0920:15:00

PRIOn knowledge base

www.prio-n.com

mojoportal v2.7.0.0

stored cross-site scripting

company info settings

vulnerability

txtcompanyname parameter

nvd

0.001 Low

EPSS

Percentile

29.0%

JSON

Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter.

CPENameOperatorVersion
mojoportaleq2.7.0.0

CPE	Name	Operator	Version
	mojoportal	eq	2.7.0.0

References

github.com/blakduk/Advisories/blob/main/Mojoportal/README.md

github.com/i7MEDIA/mojoportal/

www.mojoportal.com/

0.001 Low

EPSS

Percentile

29.0%

JSON

Related for PRION:CVE-2023-24687