ZeroHour

CVE-2019-15750

CVSS 3.1
6.1 medium
EPSS
1%p61
Published
()
Modified
Description

A Cross-Site Scripting (XSS) vulnerability in the blog function in SITOS six Build v6.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Vendors
sitos
Products
sitos six
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.