Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-52322
HistoryJan 04, 2024 - 7:15 a.m.

Design/Logic Flaw

2024-01-0407:15:00
PRIOn knowledge base
www.prio-n.com
3
xss
ecrire
assembler.php
spip
input restriction
alphanumerics

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.

CPENameOperatorVersion
spipge4.2.0
spiplt4.2.7
spiplt4.1.13

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%