exploitDog

GHSA-p9f4-mhhr-v2hp

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.

Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.

Ссылки

EPSS

Процентиль: 46%

0.00236

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-16729

CVSS3: 5.4

nvd

больше 7 лет назад

Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage under admin.php?action=files.

EPSS

Процентиль: 46%

0.00236

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79