Descripción
Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users- browsers.
CVSS 7.2EPSS 0.311%Riesgo 0.74
Ver fuente- Publicación
- 2026-05-13 16:16:33
- Versiones afectadas
- <2.1
- Tipo
- Package
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N