Описание
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.
Ссылки
- Product
- Vendor Advisory
- Product
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 10.29.1 (включая) до 10.33.0 (включая)
cpe:2.3:a:gxsoftware:xperiencentral:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00271
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
больше 2 лет назад
Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP header uses eval() in the script-src.
EPSS
Процентиль: 50%
0.00271
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79