Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hwh-38g7-jrxm

Опубликовано: 27 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 2.4

Описание

A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

EPSS

Процентиль: 12%
0.00039
Низкий

1.9 Low

CVSS4

2.4 Low

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 2.4
nvd
3 месяца назад

A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

EPSS

Процентиль: 12%
0.00039
Низкий

1.9 Low

CVSS4

2.4 Low

CVSS3

Дефекты

CWE-79