Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmqw-2h2f-3459

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

EPSS

Процентиль: 48%
0.00254
Низкий

Дефекты

CWE-79

Связанные уязвимости

nvd
больше 13 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

EPSS

Процентиль: 48%
0.00254
Низкий

Дефекты

CWE-79