exploitDog

GHSA-cxm9-p3px-pf2v

Опубликовано: 10 фев. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

Ссылки

EPSS

Процентиль: 41%

0.00194

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-24690

CVSS3: 5.4

nvd

почти 3 года назад

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/register/family.

EPSS

Процентиль: 41%

0.00194

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79