Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv7p-wh69-w9g7

Опубликовано: 21 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization.

An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization.

EPSS

Процентиль: 64%
0.00472
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 1 года назад

An issue was discovered in Italtel Embrace 1.6.4. A stored cross-site scripting (XSS) vulnerability allows authenticated and unauthenticated remote attackers to inject arbitrary web script or HTML into a GET parameter. This reflects/stores the user input without sanitization.

EPSS

Процентиль: 64%
0.00472
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79