Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j833-3wwq-9crw

Опубликовано: 26 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

EPSS

Процентиль: 65%
0.00492
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 2 лет назад

Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who accessed the site using the product.

EPSS

Процентиль: 65%
0.00492
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79