Stud Ip

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-50982 CRITICAL POC Act Now

Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do not check the file extension. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Stud Ip

NVD

CVSS 3.1

9.0

EPSS

0.5%

CVE-2023-50982

EPSS 1% CVSS 9.0

CRITICAL POC Act Now

Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysController do not check the file extension. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Stud Ip

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy