exploitDog

GHSA-w6rx-chpv-8hj4

Опубликовано: 16 июл. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 6.5

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch allows Stored XSS. This issue affects JetSearch: from n/a through 3.5.10.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch allows Stored XSS. This issue affects JetSearch: from n/a through 3.5.10.1.

Ссылки

EPSS

Процентиль: 8%

0.00029

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2025-53996

CVSS3: 6.5

nvd

7 месяцев назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSearch allows Stored XSS. This issue affects JetSearch: from n/a through 3.5.10.1.

EPSS

Процентиль: 8%

0.00029

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-79