Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-27625
HistoryMar 05, 2024 - 2:15 p.m.

Cross site scripting

2024-03-0514:15:00
PRIOn knowledge base
www.prio-n.com
6
cross site scripting
cms made simple
version 2.2.19
file manager
admin panel
new directory
user input
sanitization
nvd

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the β€œNew directory” field.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Related for PRION:CVE-2024-27625