CVE-2010-10010CWE-79

Stars Alliance PsychoStats login.php cross site scripting

Low · published June 1, 2023

CVSS v3.1
3.5
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of the argument ref leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 3.2.2b is able to address this issue. The identifier of the patch is 5d3b7311fd5085ec6ea1b1bfa9a05285964e07e4. It is recommended to upgrade the affected component. The identifier VDB-230265 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00489 · 41.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-06-01T05:00Z
EPSS history
Timeline
  • 01 JUN 05:00Z
    Stars Alliance PsychoStats login.php cross site scripting
    cvelistv5