Antsword Project: >> Antsword >> 2.0.7 Security Vulnerabilities
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
CVSS Score
9.6
EPSS Score
0.004
Published
2020-10-26
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.
CVSS Score
6.1
EPSS Score
0.005
Published
2019-07-19