CVE-2022-1163

Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

CVSS 6.8 MEDIUMEPSS 3.5%CWE-79

Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.

CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:L/A:L

Affected products

mineweb · mineweb/minewebcms

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/166629/minewebcms-1.15.2-Cross-Site-Scripting.htmlunverified cve_referencewww.exploit-db.com/exploits/50853unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/166629/minewebcms-1.15.2-Cross-Site-Scripting.html https://github.com/mineweb/minewebcms/commit/06ce52c20f208b0bbf24c6480d60332c9dd19428 https://huntr.dev/bounties/44d40f34-c391-40c0-a517-12a2c0258149 https://www.exploit-db.com/exploits/50853