Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52r6-v45h-gh94

Опубликовано: 11 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search allows Stored XSS. This issue affects Lava Ajax Search: from n/a through 1.1.9.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search allows Stored XSS. This issue affects Lava Ajax Search: from n/a through 1.1.9.

EPSS

Процентиль: 25%
0.00089
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.9
nvd
11 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lavacode Lava Ajax Search allows Stored XSS. This issue affects Lava Ajax Search: from n/a through 1.1.9.

EPSS

Процентиль: 25%
0.00089
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-79