Cross site scripting

2021-07-0922:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.8%

JSON

A stored cross site scripting (XSS) vulnerability in the ‘Smileys’ feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the ‘Smiley Code’ parameter.

CPENameOperatorVersion
codoforumeq5.0.2

CPE	Name	Operator	Version
	codoforum	eq	5.0.2

References

codoforum.com/

github.com/r0ck3t1973/xss_payload/issues/4

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for PRION:CVE-2020-25875