Cross site scripting

2023-08-2501:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

edit category

badaso v2.9.7

arbitrary scripts

html

title parameter

nvd

0.0004 Low

EPSS

Percentile

14.1%

JSON

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.

CPENameOperatorVersion
badasoeq2.9.7

CPE	Name	Operator	Version
	badaso	eq	2.9.7

References

github.com/anh91/uasoft-indonesia--badaso/blob/main/XSS4.md

0.0004 Low

EPSS

Percentile

14.1%

JSON

Related for PRION:CVE-2023-38974