Cross site scripting

2018-01-1017:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application.

CPENameOperatorVersion
websitebakereq2.10.0

CPE	Name	Operator	Version
	websitebaker	eq	2.10.0

References

gist.github.com/anonymous/13df19c04c7e86c0f5256b91376d593a