Vulnerability Details : CVE-2022-33009

A stored cross-site scripting (XSS) vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file.
Published 2022-06-27 23:15:08
Updated 2022-07-06 19:32:44
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Cross site scripting (XSS)

Exploit prediction scoring system (EPSS) score for CVE-2022-33009

EPSS FAQ
0.06%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 24 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-33009

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
3.5
 LOW AV:N/AC:M/Au:S/C:N/I:P/A:N
6.8
2.9
 NIST
4.8
 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1.7
2.7
 NIST

CWE ids for CVE-2022-33009

References for CVE-2022-33009

  • https://github.com/eddy8/LightCMS
    GitHub - eddy8/LightCMS: LightCMS 是一个基于 Laravel 开发的轻量级 CMS 系统，也可以作为一个通用的后台管理框架使用。A lightweight cms/admin framework powered by Laravel.
    Third Party Advisory
  • https://github.com/eddy8/LightCMS/issues/30
    A stored cross-site scripting (XSS) vulnerability exists in LightCMS "contents" field · Issue #30 · eddy8/LightCMS · GitHub
    Exploit;Issue Tracking;Third Party Advisory
  • http://lightcms.com
    Product

Products affected by CVE-2022-33009

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close