Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c7pv-p336-6hqg

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.

EPSS

Процентиль: 44%
0.00218
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 5 лет назад

RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/mode_emailmAction.php does not perform strict filtering.

EPSS

Процентиль: 44%
0.00218
Низкий

Дефекты

CWE-79