CVE-2023-3980

2023-07-2719:15:10

Google

osv.dev

cve-2023-3980

cross-site scripting

stored

github

omeka-s

software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.8%

JSON

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.2.

CPENameOperatorVersion
omeka-seq3.0.0
omeka-seq2.1.2
omeka-seq3.0.1
omeka-seq3.1.1
omeka-seq1.1.1
omeka-seq4.0.0-rc
omeka-seq3.1.2
omeka-seq4.0.1
omeka-seq1.4.0
omeka-seq1.0.0-beta4

Name	Operator	Version
omeka-s	eq	3.0.0
omeka-s	eq	2.1.2
omeka-s	eq	3.0.1
omeka-s	eq	3.1.1
omeka-s	eq	1.1.1
omeka-s	eq	4.0.0-rc
omeka-s	eq	3.1.2
omeka-s	eq	4.0.1
omeka-s	eq	1.4.0
omeka-s	eq	1.0.0-beta4

Rows per page:

1-10 of 391

References

github.com/omeka/omeka-s/commit/c6833c0531a07bd914e9f85a61bbbc16e9b4c8df

huntr.dev/bounties/6eb3cb9a-5c78-451f-ae76-0b1e62fe5e54