CVE-2015-1054
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.4%
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| crea8social:crea8social | crea8social | eq | 2.0 |
References
codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270
codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support
osvdb.org/show/osvdb/116732
packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html
www.exploit-db.com/exploits/35691
exchange.xforce.ibmcloud.com/vulnerabilities/99615
Related
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.4%