Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4hg-6856-qv2j

Опубликовано: 01 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious payloads in the To-Do List. The assigned user will trigger a stored XSS, which is particularly dangerous because tasks are assigned to various users on the platform.

EPSS

Процентиль: 29%
0.00103
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79