Cross site scripting

2023-09-2715:19:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

website column management

arbitrary web scripts

html

crafted payload

title parameter

nvd

0.001 Low

EPSS

Percentile

21.2%

JSON

A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter.

CPENameOperatorVersion
dedebizeq6.2.11

CPE	Name	Operator	Version
	dedebiz	eq	6.2.11

References

dedebiz.com

github.com/yux1azhengye/mycve/blob/main/dedebiz_6.2.11_xss.pdf

www.dedebiz.com/download

0.001 Low

EPSS

Percentile

21.2%

JSON

Related for PRION:CVE-2023-43232