Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-49598
HistoryDec 26, 2023 - 8:15 a.m.

Cross site scripting

2023-12-2608:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
stored vulnerability
event handlers
growi
arbitrary script execution
web browser

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

CPENameOperatorVersion
growilt6.0.0

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for PRION:CVE-2023-49598