Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4247-fw2x-jv5v

Опубликовано: 09 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MetricThemes Header Footer Composer for Elementor allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through 1.0.4.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MetricThemes Header Footer Composer for Elementor allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through 1.0.4.

EPSS

Процентиль: 38%
0.0017
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MetricThemes Header Footer Composer for Elementor allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through 1.0.4.

EPSS

Процентиль: 38%
0.0017
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79