Nucleus Cms: >> Nucleus Cms >> 3.31 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.
CVSS Score
4.3
EPSS Score
0.009
Published
2008-01-30