Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p6mx-xx2r-f2hh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.

Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.

EPSS

Процентиль: 65%
0.00491
Низкий

Связанные уязвимости

CVSS3: 6.1
nvd
почти 7 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) destination parameter to delete feature; the (2) destination parameter to edit feature; (3) content parameter in the profile feature.

EPSS

Процентиль: 65%
0.00491
Низкий