Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jcr-hvqv-jqh7

Опубликовано: 08 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

EPSS

Процентиль: 38%
0.0048
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
10 месяцев назад

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

EPSS

Процентиль: 38%
0.0048
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79