exploitDog

GHSA-592q-gqc9-78rw

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

Ссылки

EPSS

Процентиль: 62%

0.00435

Низкий

CVE ID

Связанные уязвимости

CVE-2019-11870

CVSS3: 6.1

ubuntu

больше 6 лет назад

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

CVE-2019-11870

CVSS3: 6.1

nvd

больше 6 лет назад

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

CVE-2019-11870

CVSS3: 6.1

debian

больше 6 лет назад

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in t ...

EPSS

Процентиль: 62%

0.00435

Низкий

CVE ID