CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through <= 1.3.
Explanation of Vulnerability in Simple Terms
Page Transition versions 1.3 and earlier contain a cross-site scripting (XSS) vulnerability that allows authenticated users with high privileges to inject malicious scripts. The vulnerability requires user interaction to trigger. An attacker with administrative access can craft a malicious page transition that executes JavaScript in the context of other users' browsers, potentially compromising site security.
What an attacker can do
Inject and execute malicious JavaScript in other users' browsers via crafted page transitions.
Potential impact on your site
An admin account compromise could allow script injection affecting other users and potentially escalating to broader site compromise.
Conditions required to exploit
Attacker must have high-level administrative privileges and the victim must visit or interact with a malicious page.
Key dates
External resources
Related vulnerabilities
