Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wv3w-qq6q-g9j3

Опубликовано: 10 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

EPSS

Процентиль: 95%
0.17352
Средний

9.6 Critical

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 9.6
nvd
около 2 лет назад

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.

EPSS

Процентиль: 95%
0.17352
Средний

9.6 Critical

CVSS3

Дефекты

CWE-79