exploitDog

GHSA-gphf-mppm-mv89

Опубликовано: 22 июл. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 4.8

Описание

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).This issue affects B2B: before 04.06.2025.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).This issue affects B2B: before 04.06.2025.

Ссылки

EPSS

Процентиль: 5%

0.00022

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-4294

CVSS3: 4.8

nvd

7 месяцев назад

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).This issue affects B2B: before 04.06.2025.

EPSS

Процентиль: 5%

0.00022

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79