EDB-46496
PoCCraft CMS 3.1.12 Pro - Cross-Site Scripting
view exploit source exploit_dbtype webappsauthor Ismail Tasdelenpublished 2019-03-04catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-9554US | medium6.1 | Exploit | ||
In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/news/new URI. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan