u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS)
published June 17, 2022
CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is
u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl (96502)%27bad=", it can cause html injection.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00774 · 55.2th percentile
Published
2022-06-17T15:22Z
EPSS history
Timeline
17 JUN 15:22Z
u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS)