Threats tagged 'ghsa-7xfj-xh5w-pgc6'

A cross-site scripting (XSS) vulnerability exists in EmpireSoft EmpireCMS up to version 8.0 in the /e/member/mspace/index.php file. The flaw is triggered by manipulation of the spacename argument and can be exploited remotely. Public exploit code is available, but the vendor has not responded or issued a fix. The CVSS score is 3.5, indicating low severity.