Description
Kuicms Php EE 2.0 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted content through the bbs reply endpoint. Attackers can send POST requests to /web/?c=bbs&a=reply with HTML and JavaScript payloads in the content parameter to execute arbitrary scripts in users- browsers.
CVSS 7.2EPSS 0.311%Risque 0.74
Voir la source- Publication
- 2026-05-13 16:16:33
- Versions concernées
- <2.1
- Type
- Package
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N