Design/Logic Flaw

2019-07-1012:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

26.7%

An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.

CPENameOperatorVersion
eventumle3.5.0

CPE	Name	Operator	Version
	eventum	le	3.5.0

References

github.com/eventum/eventum/blob/master/CHANGELOG.md

github.com/eventum/eventum/releases/tag/v3.5.2

0.001 Low

EPSS

Percentile

26.7%

Related for PRION:CVE-2018-12622