Περιγραφή
Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users- browsers.
CVSS 7.2EPSS 0.311%Κίνδυνος 0.74
Προβολή πηγής- Δημοσίευση
- 2026-05-13 16:16:33
- Επηρεαζόμενες εκδόσεις
- <2.1
- Τύπος
- Package
- Διάνυσμα
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N