CVE-2021-47835mediumCWE-79

Freeter 1.2.1 - Persistent Cross-Site Scripting

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.1epss 0.5%

probabilidad de explotación

0.5%top 61% de las CVE

explotación observada

noninguna fuente lo reporta

Freeter 1.2.1 contains a persistent cross-site scripting vulnerability that allows attackers to store malicious payloads in custom widget titles and files. Attackers can craft malicious files with embedded scripts that execute when victims interact with the application, potentially enabling remote code execution.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Productos afectados

Freeter · Freeter

Referencias

https://freeter.io/https://imgur.com/a/iBuKWm4 https://www.exploit-db.com/exploits/49833 https://www.vulncheck.com/advisories/freeter-persistent-cross-site-scripting