PT-2019-13175 · 1234N+1 · Minicms

Hachp1O · Publicado 2019-07-03 · Atualizado 2019-07-10 · CVE-2019-13186

NVD

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

In MiniCMS V1.10, stored XSS was found in mc-admin/post-edit.php via the tags box. An attacker can use it to get a user's cookie. This is different from CVE-2018-10296, CVE-2018-16233, and CVE-2018-20520.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-13186

Produtos afetados

Minicms

Referências · 3

• 🔥 https://github.com/bg5sbk/MiniCMS/issues/31 · Exploit
• https://osv.dev/vulnerability/CVE-2019-13186 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13186 · Nota de Segurança