Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-497f-8vx2-v9vw

Опубликовано: 29 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.

EPSS

Процентиль: 21%
0.00068
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
4 месяца назад

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.

EPSS

Процентиль: 21%
0.00068
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79