CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Ella Van Durpe Slides & Presentations slide allows Code Injection.This issue affects Slides & Presentations: from n/a through <= 0.0.39.
Explanation of Vulnerability in Simple Terms
Slides & Presentations versions 0.0.39 and earlier contain an input validation flaw that allows authenticated users to modify site content or disrupt service. The vulnerability requires a valid user account but no special privileges. An attacker can inject malicious input through the application interface to alter data or cause temporary unavailability.
What an attacker can do
Modify site content or cause temporary service disruption.
Potential impact on your site
Unauthorized changes to presentations or temporary service interruptions affecting site availability.
Conditions required to exploit
Attacker must have a valid user account with low-level access to the application.
Key dates
External resources
Related vulnerabilities
