Description
Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page, (2) gbs, (3) side, (4) id, (5) imgid, (6) cat, or (7) orderby parameter.
Unscored
CVE-2019-7409
EUVD-2019-16951GHSA-9x9m-9jh5-6gwf
Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or…
Published May 13, 2019 · Updated Aug 4, 2024 · Assigned by mitre