Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6p96-35cj-r28v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

EPSS

Процентиль: 71%
0.00686
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 4 лет назад

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks.

EPSS

Процентиль: 71%
0.00686
Низкий

Дефекты

CWE-79