Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qx4c-g8jj-h99q

Опубликовано: 26 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.

EPSS

Процентиль: 38%
0.00163
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 1 года назад

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a malicious javascript payload. The payload is stored and subsequently executed in the voter.php and profile.php pages whenever the account information is accessed.

EPSS

Процентиль: 38%
0.00163
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79