low2.6Public exploit code
CVE-2013-5099
Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Anchor CMS 0.9.1 - Persistent Cross-Site Scripting2013-07-18 · webapps · php · Verified
Impact
Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Anchor | Anchor Cms | Version 0.9.1 |