Cross site scripting

2023-07-3116:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

xss

duxcms 2.1

remote attackers

arbitrary code

0.001 Low

EPSS

Percentile

25.6%

JSON

Cross Site Scripting (XSS) vulnerability in DuxCMS 2.1 allows remote attackers to run arbitrary code via the content, time, copyfrom parameters when adding or editing a post.

CPENameOperatorVersion
duxcmseq2.1

CPE	Name	Operator	Version
	duxcms	eq	2.1

References

gitee.com/annyshow/DuxCMS2.1/issues/I183GG

0.001 Low

EPSS

Percentile

25.6%

JSON

Related for PRION:CVE-2020-36763