exploitDog

CVE-2022-38550

Опубликовано: 19 сент. 2022

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Ссылки

https://github.com/Pick-program/JEESNS/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Pick-program/JEESNS/issues/1
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jeesns:jeesns:2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00198

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-c6xf-r4xr-5phh

CVSS3: 5.4

github

больше 3 лет назад

A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

EPSS

Процентиль: 42%

0.00198

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

CWE-79