Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3h5v-53qj-h7p2

Опубликовано: 28 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.

Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.

EPSS

Процентиль: 35%
0.00141
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
11 месяцев назад

Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.

EPSS

Процентиль: 35%
0.00141
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79