CyberRota Analysis
AI-GeneratedThe vulnerability affects the Stats Generation component of stilleshan ServerStatus versions 1.0 and 2.0, allowing for cross-site scripting (XSS) through manipulation of the 'custom' argument in the server/src/main.cpp file. This flaw can be exploited remotely, potentially compromising user data and session integrity. Organizations using these versions should prioritize remediation efforts, especially if they handle sensitive user information.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in stilleshan ServerStatus 1.0/2.0. Impacted is an unknown function of the file server/src/main.cpp of the component Stats Generation. Performing a manipulation of the argument custom results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.