Cross site scripting

2018-02-1803:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

56.8%

JSON

An issue was discovered in Pluck through 4.7.4. A stored cross-site scripting (XSS) vulnerability allows remote unauthenticated users to inject arbitrary web script or HTML into admin/blog Reaction Comments via a crafted URL.

CPENameOperatorVersion
pluckle4.7.4

CPE	Name	Operator	Version
	pluck	le	4.7.4

References

github.com/pluck-cms/pluck/issues/47

0.002 Low

EPSS

Percentile

56.8%

JSON

Related for PRION:CVE-2018-7197