Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58895
HistoryJun 27, 2022 - 12:00 a.m.

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58895)

2022-06-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
30
php
mysql-based
online recruitment system
china xunyi technology
cross-site scripting vulnerability
data validation filtering
user-supplied data
output
javascript code

EPSS

0.001

Percentile

34.0%

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output from path/job. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

34.0%

Related for CNVD-2022-58895