Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3grp-9cmg-wp24

Опубликовано: 22 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

EPSS

Процентиль: 28%
0.00348
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
ubuntu
почти 2 года назад

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

CVSS3: 5.4
nvd
почти 2 года назад

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

CVSS3: 5.4
debian
почти 2 года назад

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the nam ...

EPSS

Процентиль: 28%
0.00348
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79