Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pgw9-9vq7-fw2c

Опубликовано: 05 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

EPSS

Процентиль: 44%
0.00211
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

EPSS

Процентиль: 44%
0.00211
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79