GHSA-xjw6-6j27-9w6v

Опубликовано: 27 янв. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.

Ссылки

EPSS

Процентиль: 52%

0.00295

Низкий

5.4 Medium

CVSS3

CVE ID

CVE-2022-48007

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-48007

CVSS3: 5.4

nvd

около 3 лет назад

A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.

CVE-2022-48007

CVSS3: 5.4

debian

около 3 лет назад

A stored cross-site scripting (XSS) vulnerability in identification.ph ...

EPSS

Процентиль: 52%

0.00295

Низкий

5.4 Medium

CVSS3

CVE ID

CVE-2022-48007

Дефекты

CWE-79