CVE-2018-17300

Description

Stored XSS exists in CuppaCMS through 2018-09-03 via an administrator/#/component/table_manager/view/cu_menus section name.

Related CPE's

a cuppacms cuppacms ********

References

https://github.com/CuppaCMS/CuppaCMS/issues/4

ExploitVendor Advisory

https://github.com/security-breachlock/CVE-2018-17300/blob/master/cuppa_xss.pdf

ExploitThird Party Advisory

CvssV3 impact

Version	3.1
VectorString	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AttackVector	NETWORK
AttackComplexity	LOW
PrivilegesRequired	HIGH
UserInteraction	REQUIRED
Scope	CHANGED
ConfidentialityImpact	LOW
IntegrityImpact	LOW
AvailabilityImpact	NONE
BaseScore	4.8
BaseSeverity	MEDIUM

CvssV2 impact

Version	2.0
VectorString	AV:N/AC:M/Au:S/C:N/I:P/A:N
AccessVector	NETWORK
AccessComplexity	MEDIUM
Authentication	SINGLE
ConfidentialityImpact	NONE
IntegrityImpact	PARTIAL
AvailabilityImpact	NONE
BaseScore	3.5

Created by Yello

About Severity.io