Описание
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
trac | fixed | 0.9.3-1 | package | |
trac | fixed | 0.8.1-3sarge4 | sarge | package |
EPSS
Процентиль: 70%
0.00658
Низкий
Связанные уязвимости
ubuntu
больше 19 лет назад
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
nvd
больше 19 лет назад
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
CVSS3: 6.1
github
больше 3 лет назад
Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability
EPSS
Процентиль: 70%
0.00658
Низкий