Veille CVE

Recherche « Ampps Advanced Guestbook »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ampps Advanced Guestbook » ✕
  1. CVE-2021-47950 6.4 Moyenne

    Ampps Advanced Guestbook

    Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject malicious scripts by manipulating the s_emotion parameter. Attackers can submit POST requests to admin.php with JavaScript code in the s_emotion field, which executes when administrators view the smilies tab.