GHSA-p46c-m4j7-mjvq

Source

https://github.com/advisories/GHSA-p46c-m4j7-mjvq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/12/GHSA-p46c-m4j7-mjvq/GHSA-p46c-m4j7-mjvq.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-p46c-m4j7-mjvq

Aliases

CVE-2022-4350

Published

2022-12-08T12:30:26Z

Modified

2024-12-05T05:43:46.115104Z

Summary

Mingsoft MCMS vulnerable to Cross-site Scripting

Details

A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-215112.

Database specific

{
    "nvd_published_at": "2022-12-08T10:15:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2022-12-08T15:16:04Z"
}

References

Affected packages

Maven / net.mingsoft:ms-mcms

Package

Name: net.mingsoft:ms-mcms; View open source insights on deps.dev
Purl: pkg:maven/net.mingsoft/ms-mcms

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

5.2.8

Affected versions

4.*

4.6.3-SNAPSHOTS

4.6.5

4.7.1

4.7.2

5.*

5.0.0

5.0.1

5.1

5.2

5.2.0

5.2.0.RELEASE

5.2.1

5.2.2

5.2.3

5.2.4

5.2.5

5.2.6

5.2.7

5.2.8