exploitDog

GHSA-2vxx-j2xr-8w6v

Опубликовано: 26 июн. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1.

Ссылки

EPSS

Процентиль: 7%

0.00025

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-48923

CVSS3: 6.1

nvd

8 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Toc.Js allows Cross-Site Scripting (XSS).This issue affects Toc.Js: from 0.0.0 before 3.2.1.

EPSS

Процентиль: 7%

0.00025

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79