CVE-2018-16622 in DoraCMS정보

요약

\~에 의해 MITRE

Multiple cross-site scripting (XSS) vulnerabilities in /api/content/addOne in DoraCMS v2.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) discription or (2) comments field, related to users/userAddContent.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2018. 09. 06.

공개

2018. 09. 06.

모더레이션

수락

항목

VDB-123682

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

5.4 (NVD)

EPSS

0.00197

KEV

아니요

활동

매우 낮음

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-16622
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-16622
CVE Details	https://www.cvedetails.com/cve/CVE-2018-16622/

◂ 이전 개요 다음 ▸

Do you know our Splunk app?

Download it now for free!