PT-2017-6811 · Anchor · Anchor Cms

A0Xnirudh · Published 2017-09-07 · Updated 2017-09-13 · CVE-2015-5060

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions anchor-cms versions prior to 0.9-dev

Description The issue is related to a cross-site scripting (XSS) vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a website, which are then executed by the user's browser.

Recommendations For versions prior to 0.9-dev, update to version 0.9-dev or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-5060

Affected Products

Anchor Cms

References · 2

• 🔥 http://github.com/anchorcms/anchor-cms/issues/875 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-5060 · Security Note