PT-2021-10489 · Unknown · S-Cms Government Station Building System
Str1Am
·
Published
2021-12-22
·
Updated
2021-12-23
·
CVE-2020-20425
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
S-CMS Government Station Building System version 5.0
Description:
The issue is related to a cross-site scripting (XSS) vulnerability in the search function. This means an attacker could potentially inject malicious scripts into the search function, which would then be executed by the user's browser, allowing the attacker to steal user data or take control of the user's session.
Recommendations:
For S-CMS Government Station Building System version 5.0, consider disabling the search function until a patch is available to prevent potential exploitation of the XSS vulnerability. Restrict access to the search function to minimize the risk of exploitation. Avoid using the search function in the affected system until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
S-Cms Government Station Building System