CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bowo Debug Log Manager debug-log-manager allows Stored XSS.This issue affects Debug Log Manager: from n/a through <= 2.3.4.
Explanation of Vulnerability in Simple Terms
Debug Log Manager versions 2.3.4 and earlier contain a cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts into debug log output that execute in the browsers of users viewing those logs. The vulnerability requires user interaction—a victim must visit a page displaying the affected log data. Impact is limited to the scope of the application and affects confidentiality, integrity, and availability at low levels.
What an attacker can do
Inject malicious scripts that execute in users' browsers when they view debug logs.
Potential impact on your site
Users viewing debug logs could have sessions hijacked, credentials stolen, or be redirected to malicious sites.
Conditions required to exploit
No authentication required. Victim must visit a page displaying the injected log content.
Key dates
External resources
Related vulnerabilities
