Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6vxv-fw7p-f2ph

Опубликовано: 04 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.

EPSS

Процентиль: 26%
0.0009
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Cross-site Scripting (XSS) reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response.

EPSS

Процентиль: 26%
0.0009
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79