Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-69j8-jpx9-w6wr

Опубликовано: 23 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

EPSS

Процентиль: 43%
0.00209
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.5
nvd
около 4 лет назад

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

EPSS

Процентиль: 43%
0.00209
Низкий

Дефекты

CWE-79