CVE-2013-7188

2013-12-2023:00:00

mitre

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.9%

JSON

Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

extras.hostbillapp.com/security-advisory-hostbill-version-2013-12-14/

hostbillapp.com/changelog

osvdb.org/101030

secunia.com/advisories/56124

blog.rack911.com/security-advisories/hostbill-xss-admin-hijack-security-vulnerability-r911-0099

exchange.xforce.ibmcloud.com/vulnerabilities/89750