Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mq7f-f783-pc94

Опубликовано: 20 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

EPSS

Процентиль: 14%
0.00045
Низкий

7.1 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.1
nvd
3 месяца назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

EPSS

Процентиль: 14%
0.00045
Низкий

7.1 High

CVSS3

Дефекты

CWE-79