Unscored CVE-2013-4899 EUVD-2013-4744GHSA-4gq5-9fxc-cv49

Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script o…

Published Sep 9, 2013 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the gallery/ page.

References

https://www.htbridge.com/advisory/HTB23166
20130821 Cross-Site Scripting (XSS) in Twilight CMS mailing-list
54404 third-party-advisory