Cross site scripting

2024-01-3102:15:00

PRIOn knowledge base

www.prio-n.com

stored cross-site scripting

poscms

arbitrary code execution

crafted payload

nvd

6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index.php?c=install&m=index&step=2&is_install_db=0.

CPENameOperatorVersion
poscmseq4.6.2

CPE	Name	Operator	Version
	poscms	eq	4.6.2

References

github.com/Num-Nine/CVE/issues/12