Описание
touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious webpage/website etc. The issue is patched in version 2.0.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0 (исключая)
cpe:2.3:a:touchbase.ai_project:touchbase.ai:*:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.0309
Низкий
8 High
CVSS3
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
CWE-79
EPSS
Процентиль: 86%
0.0309
Низкий
8 High
CVSS3
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
CWE-79