Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gjg-222q-cwf6

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

EPSS

Процентиль: 60%
0.00401
Низкий

Связанные уязвимости

nvd
больше 22 лет назад

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

EPSS

Процентиль: 60%
0.00401
Низкий