Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9gjr-hc3c-4w38

Опубликовано: 01 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.

EPSS

Процентиль: 43%
0.00208
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger actions for administrator users.

EPSS

Процентиль: 43%
0.00208
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79