Cross site scripting

2021-08-2618:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

Cross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM_9.1/index.php/configuration.

CPENameOperatorVersion
qdpmeq9.1

CPE	Name	Operator	Version
	qdpm	eq	9.1

References

github.com/joelister/Persistent-XSS-on-qdPM-9.1/issues/2

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2020-18468