Published: 27/05/2012 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Pligg CMS prior to 1.2.2 allow remote malicious users to inject arbitrary web script or HTML via (1) an arbitrary parameter in a move or (2) minimize action to admin/admin_index.php; (3) the karma_username parameter to module.php in the karma module; (4) q_1_low, (5) q_1_high, (6) q_2_low, or (7) q_2_high parameter in a configure action to module.php in the captcha module; or (8) the edit parameter to module.php in the admin_language module.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

pligg pligg cms 9.9

pligg pligg cms

pligg pligg cms 1.0.2

pligg pligg cms 1.0.0

pligg pligg cms 1.1.2

pligg pligg cms 1.2.0

pligg pligg cms 9.5

pligg pligg cms 9.9.5

pligg pligg cms 1.1.4

pligg pligg cms 9.9.0

pligg pligg cms 1.0.3

pligg pligg cms 1.0.4

pligg pligg cms 1.1.3

pligg pligg cms 1.1.5

pligg pligg cms 1.1.0

pligg pligg cms 1.0.1


source: wwwsecurityfocuscom/bid/53662/info Pligg CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site This can allow the att ...

Mailing Lists

Pligg CMS version 121 suffers from cross site scripting and local file inclusion vulnerabilities ...