CVE-2012-1979
LOW 3.5EPSS 1.7%
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the email parameter (aka Email address field) in an edit_user configuration action.
- CVSS v2.0 NVD
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 1.66% chance of exploitation in the next 30 days, 76th percentile
- Published
- 2012-04-17
- Updated
- 2024-08-06