Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2025-65187

9 месяцев назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2025-65187

9 месяцев назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2025-65187

9 месяцев назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v ...

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-cf64-8857-h96q

9 месяцев назад

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
9 месяцев назад
debian логотип
CVE-2025-65187

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v ...

CVSS3: 6.1
0%
Низкий
9 месяцев назад
github логотип
GHSA-cf64-8857-h96q

A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authenticated user can inject malicious JavaScript into this field and it executes whenever the page is viewed.

CVSS3: 6.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу