Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rf4-33cq-hww8

Опубликовано: 04 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8

Описание

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.

EPSS

Процентиль: 55%
0.0032
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
10 месяцев назад

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.

EPSS

Процентиль: 55%
0.0032
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-78