Cross site scripting

2019-05-1314:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

53.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page, (2) gbs, (3) side, (4) id, (5) imgid, (6) cat, or (7) orderby parameter.

CPENameOperatorVersion
profiledesign_cmseq6.0.2.5

CPE	Name	Operator	Version
	profiledesign_cms	eq	6.0.2.5

References

metamorfosec.com/Files/Advisories/METS-2019-001-Multiple_XSS_Vulnerabilities_in_ProfileDesign_CMS_v6.0.2.5.txt

www.vegadesign.net/?side=pdcmd_endringslogg

0.002 Low

EPSS

Percentile

53.6%

JSON

Related for PRION:CVE-2019-7409