D4rkP0w4r/AeroCMS-Comment-Stored_XSS-Poc

D4rkP0w4r/AeroCMS-Comment-Stored_XSS-Poc

GitHubGitHub
GitHubgithub.com
Unavailable
This project is no longer available (or publicly accessible) from GitHub
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-27063↗
6.1 MEDIUM4.3 MEDIUM

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.