Vulnerability Details CVE-2019-8938
VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.6%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/151800/VertrigoServ-2.17-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/47
- https://sourceforge.net/p/vertrigo/news/
- http://packetstormsecurity.com/files/151800/VertrigoServ-2.17-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Feb/47
- https://sourceforge.net/p/vertrigo/news/
Products affected by CVE-2019-8938
-
cpe:2.3:a:vertrigoserv_project:vertrigoserv:2.17