A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed to the "GamePanelX-V3-master/ajax/ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:gamepanelx:gamepanelx-v3:3.0.12:*:*:*:*:*:*:*",
"range": [
{
"introduced": "3.0.12"
},
{
"last_affected": "3.0.12"
}
],
"source": "CPE_STRING"
}
]
}