Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fv3m-jf9j-44vh

Опубликовано: 19 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.

EPSS

Процентиль: 25%
0.00089
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.8
nvd
почти 2 года назад

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow an attacker to store a malicious JavaScript payload within the application by adding the payload to 'Community Description' or 'Community Rules'.

EPSS

Процентиль: 25%
0.00089
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-79