CVE-2012-4901 Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to a...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to admin/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| template cms project template cms | <= 2.1.1 | No fix listed |
References
- 85895 vdb-entry
- 55766 vdb-entry
- 21742 exploit
- www.htbridge.com exploit