CVE-2016-4875 in GeeklogИнформация

Сводка

по MITRE

Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3) userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Резервировать

17.05.2016

Раскрытие

14.04.2017

Модерация

принято

Вход

VDB-99880

EPSS

0.00601

KEV

Нет

Деятельности

Очень низкий

Сектор

Education

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-4875
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-4875
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-4875/

◂ ПредыдущийОбзорДалее ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!