5 matches found
EUVD-2018-8586
Malware in sbrugna...
6.1CVSS6.3AI score0.00675EPSS
SaveExploits1References2
Cross site scripting
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
4.3CVSS5.9AI score0.00675EPSS
SaveExploits1References1Affected Software1
CVE-2018-16786
DedeCMS 5.7 SP2 allows XSS via an onhashchange attribute in the msg parameter to /plus/feedbackajax.php...
6.1CVSS6AI score0.00675EPSS
SaveExploits1References1
CVE-2018-16786
CVE-2018-16786 concerns DedeCMS 5.7 SP2, where a Cross-Site Scripting (XSS) flaw exists in the /plus/feedback_ajax.php file. The vulnerability is triggered via an onhashchange attribute in the msg parameter, allowing arbitrary JavaScript execution in the context of the affected user. The availabl...
6.1CVSS5.9AI score0.00675EPSS
SaveExploits1References1Affected Software1
20