What is GHSA-q9g7-pff4-548r?

GHSA-q9g7-pff4-548r is a security advisory published by GitHub Security Advisories with Medium severity. Gleez Cms Cross-site Scripting in Profile Page

Which CVE IDs does GHSA-q9g7-pff4-548r cover?

GHSA-q9g7-pff4-548r covers the following CVE IDs: CVE-2018-1999021. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q9g7-pff4-548r?

GHSA-q9g7-pff4-548r has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-q9g7-pff4-548r?

GHSA-q9g7-pff4-548r affects 1 product, including: composer/gleez/cms:\u003c= 1.3.0.

GHSA-q9g7-pff4-548rMediumCVSS 5.4

Gleez Cms Cross-site Scripting in Profile Page

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

May 5, 2024

🔗 CVE IDs covered (1)

CVE-2018-1999021 →

📋 Description

Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can result in injection of arbitrary web script or HTML via the profile page editor. The victim must navigate to the attacker's profile page to exploit this vulnerability.

🎯 Affected products1

composer/gleez/cms:<= 1.3.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-1999021
https://github.com/gleez/cms/issues/797
https://github.com/advisories/GHSA-q9g7-pff4-548r