CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo – Social Network, Membership, Registration, User Profiles: from n/a through 6.2.2.0.
Explanation of Vulnerability in Simple Terms
PeepSo Community allows logged-in users to inject malicious scripts into the site through user-controlled input. An attacker with a low-privilege account can craft a link that, when clicked by another user, executes JavaScript in their browser. This can steal session cookies, redirect users, or perform actions on their behalf. The vulnerability affects versions up to 6.2.2.0.
What an attacker can do
Inject JavaScript that runs in other users' browsers when they click a malicious link.
Potential impact on your site
User accounts can be compromised, session tokens stolen, or site functionality abused without admin knowledge.
Conditions required to exploit
Attacker needs a low-privilege account on the site; victim must click the attacker's link.
Key dates
External resources
Related vulnerabilities
