Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hg2p-7794-g6x3

Опубликовано: 06 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.

EPSS

Процентиль: 20%
0.00065
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 1 года назад

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.

EPSS

Процентиль: 20%
0.00065
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79