CVE-2026-5332
⚪ Do wiadomości
Wstrzyknięcie skryptów w Xiaopi Panel umożliwia atak XSS zdalnie.
CVSS
3.5
EPSS
0.0%
Exploit
none
Vendor
xiaopi
Opis źródłowy (NVD)
A vulnerability was identified in Xiaopi Panel 1.0.0. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
xss
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 3.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.0% |
| Opublikowano (NVD) | 2026-04-02 14:16:36 UTC |
| Ostatnia modyfikacja (NVD) | 2026-04-07 18:50:14 UTC |
Referencje
- https://github.com/ltranquility/vuln_submit/issues/1 (cna@vuldb.com) [Not Applicable]
- https://vuldb.com/submit/780839 (cna@vuldb.com) [Third Party Advisory, VDB Entry]
- https://vuldb.com/vuln/354666 (cna@vuldb.com) [Third Party Advisory, VDB Entry]
- https://vuldb.com/vuln/354666/cti (cna@vuldb.com) [Permissions Required, VDB Entry]