What is GHSA-825g-f3g2-6vxf?

GHSA-825g-f3g2-6vxf is a security advisory published by GitHub Security Advisories with Medium severity. QuickApps CMS Cross-site Scripting

Which CVE IDs does GHSA-825g-f3g2-6vxf cover?

GHSA-825g-f3g2-6vxf covers the following CVE IDs: CVE-2017-1000495. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-825g-f3g2-6vxf?

GHSA-825g-f3g2-6vxf has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-825g-f3g2-6vxf?

GHSA-825g-f3g2-6vxf affects 1 product, including: composer/quickapps/cms:\u003c= 2.0.0-beta1.

GHSA-825g-f3g2-6vxfMediumCVSS 5.4

QuickApps CMS Cross-site Scripting

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000495 →

📋 Description

QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and performing unauthorised actions with an administrator user's account

🎯 Affected products1

composer/quickapps/cms:<= 2.0.0-beta1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000495
https://github.com/quickapps/cms/issues/183
https://github.com/quickapps/cms/commit/7d648f21bd87af8263dcd6449f0946a2dd31348a
https://github.com/advisories/GHSA-825g-f3g2-6vxf