Lucene search
K

6 matches found

OSV
OSV
added 2023/02/09 8:15 p.m.16 views

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

6.1CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2023/02/09 8:15 p.m.9 views

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

6.1CVSS5.9AI score0.46477EPSS
Exploits1References3
Prion
Prion
added 2023/02/09 8:15 p.m.13 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

5.8CVSS5.9AI score0.46477EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/02/09 12:0 a.m.1 views

mojoPortal 跨站脚本漏洞

mojoPortal is the United States Joe Audette individual developer of a set of open source , object-oriented Web site architecture WSF and content management system CMS. The system offers event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

6.1CVSS6.5AI score0.46477EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/02/09 12:0 a.m.13 views

CVE-2023-24322

A reflected cross-site scripting XSS vulnerability in the FileDialog.aspx component of mojoPortal v2.7.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ed and tbi parameters...

6AI score0.46477EPSS
Exploits1References3
CVE
CVE
added 2023/02/09 12:0 a.m.129 views

CVE-2023-24322

CVE-2023-24322 affects mojoPortal 2.7.0.0. A reflected cross-site scripting (XSS) flaw exists in the FileDialog.aspx component, exploitable by sending a crafted payload into the ed and tbi parameters. Public sources describe the vulnerability as allowing an attacker to inject arbitrary web script...

6.1CVSS5.9AI score0.46477EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder