Vulnerability Details CVE-2013-6239
Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/123764
- http://seclists.org/fulldisclosure/2013/Oct/221
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88276
- http://packetstormsecurity.com/files/123764
- http://seclists.org/fulldisclosure/2013/Oct/221
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88276
Products affected by CVE-2013-6239
-
cpe:2.3:a:exis-ti:exis_contexis:-
-
cpe:2.3:a:exis-ti:exis_contexis:1.0