Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q7fg-7hpm-4f2f

Опубликовано: 12 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.8
CVSS3: 4.8

Описание

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load.

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load.

EPSS

Процентиль: 15%
0.00049
Низкий

4.8 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
3 месяца назад

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administrator privileges to inject persistent JavaScript codes that are executed in users' browsers upon page load.

EPSS

Процентиль: 15%
0.00049
Низкий

4.8 Medium

CVSS4

4.8 Medium

CVSS3

Дефекты

CWE-79