Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jcr-hvqv-jqh7

Опубликовано: 08 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

EPSS

Процентиль: 52%
0.00286
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
5 месяцев назад

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

EPSS

Процентиль: 52%
0.00286
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79