Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xhf2-5c6w-86fx

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 6.1

Описание

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /FacturaE/VerFacturaPDF.

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /FacturaE/VerFacturaPDF.

EPSS

Процентиль: 6%
0.00026
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
7 месяцев назад

Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.

EPSS

Процентиль: 6%
0.00026
Низкий

5.1 Medium

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79