header-logo
Suggest Exploit
vendor:
Nakid CMS
by:
Not mentioned
7.5
CVSS
HIGH
Cross-Site Scripting
79
CWE
Product Name: Nakid CMS
Affected Version From: Nakid CMS 1.0.2
Affected Version To: Not mentioned
Patch Exists: No
Related CWE: Not mentioned
CPE: a:nakid_cms:nakid_cms:1.0.2
Metasploit:
Other Scripts:
Platforms Tested: Not mentioned
Not mentioned

Cross-Site Scripting Vulnerability in Nakid CMS

Nakid CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Mitigation:

It is recommended to sanitize user-supplied data before using it to generate dynamic web content. Implementing proper input validation and output encoding can help mitigate this vulnerability.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/48109/info

Nakid CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Nakid CMS 1.0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/cms/assets/addons/kcfinder/browse.php?CKEditorFuncNum=0);alert(0);//

Navigation

Suggest Exploit

Services By CQR