Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xc6-7jqp-827m

Опубликовано: 07 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module.

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module.

EPSS

Процентиль: 47%
0.00243
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 3 лет назад

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or HTML via crafted payload injected into the Name field under the Create New module.

EPSS

Процентиль: 47%
0.00243
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79