Cross site scripting

2018-01-0314:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user’s real name field resulting in denial of service and performing unauthorised actions with an administrator user’s account

CPENameOperatorVersion
quickapps_cmseq2.0.0

CPE	Name	Operator	Version
	quickapps_cms	eq	2.0.0

References

github.com/quickapps/cms/issues/183

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2017-1000495