Kurz gesagt
- CVE-2017-1000495 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in quickapps/cms, quickapps cms (quickappscms).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.63%, höher als bei 50.4% aller Schwachstellen.
- Abhilfe: auf 2.0.0 oder neuer aktualisieren.
Description
QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's account
NVD description
QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's account
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free