Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hr54-vmm8-ccwx

Опубликовано: 08 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

EPSS

Процентиль: 16%
0.00052
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
4 месяца назад

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

EPSS

Процентиль: 16%
0.00052
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79