Vulnerability Details CVE-2015-1054
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.5%
CVSS Severity
CVSS v2 Score 3.5
References
- http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270
- http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support
- http://osvdb.org/show/osvdb/116732
- http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html
- http://www.exploit-db.com/exploits/35691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99615
- http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270
- http://codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support
- http://osvdb.org/show/osvdb/116732
- http://packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html
- http://www.exploit-db.com/exploits/35691
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99615
Products affected by CVE-2015-1054
-
cpe:2.3:a:crea8social:crea8social:2.0