Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3w43-vh49-x5jp

Опубликовано: 22 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Spa grandspa allows Reflected XSS.This issue affects Grand Spa: from n/a through <= 3.5.5.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Spa grandspa allows Reflected XSS.This issue affects Grand Spa: from n/a through <= 3.5.5.

EPSS

Процентиль: 14%
0.0023
Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.1
nvd
7 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Spa grandspa allows Reflected XSS.This issue affects Grand Spa: from n/a through <= 3.5.5.

EPSS

Процентиль: 14%
0.0023
Низкий

7.1 High

CVSS3

Дефекты

CWE-79