Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vf7v-fxq6-4mfc

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action.

Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action.

EPSS

Процентиль: 88%
0.03701
Низкий

Дефекты

CWE-79

Связанные уязвимости

nvd
около 17 лет назад

Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action.

EPSS

Процентиль: 88%
0.03701
Низкий

Дефекты

CWE-79