Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v9q5-g2rr-38w9

Опубликовано: 03 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.

EPSS

Процентиль: 31%
0.00118
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.6
nvd
больше 2 лет назад

Cross-Site Scripting (XSS) vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter.

EPSS

Процентиль: 31%
0.00118
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-79