exploitDog

GHSA-5q87-25fm-h25v

Опубликовано: 29 нояб. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 4.8

Описание

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.

Ссылки

EPSS

Процентиль: 47%

0.00243

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-36136

CVSS3: 4.8

nvd

около 3 лет назад

ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.

EPSS

Процентиль: 47%

0.00243

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79