Stored XSS Vulnerability in WebsiteBaker by WebsiteBaker
CVE-2017-9361

6.1MEDIUM

Key Information:

Vendor

Websitebaker

Status
Websitebaker
Vendor
CVE Published:
2 June 2017

What is CVE-2017-9361?

WebsiteBaker version 2.10.0 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability through the endpoint located at /account/details.php. This flaw allows attackers to inject malicious scripts into the web application, posing significant risks to users and potential data compromise. It is crucial for website administrators using this version to apply necessary patches and updates to safeguard against exploitation.

References

https://jgj212.blogspot.tw/2017/05/a-stored-xss-vulnerabi...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.