CVE-2023-4561

2023-08-2801:15:11

Google

osv.dev

cross-site scripting

github repository

omeka-s

version 4.0.4

software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.8%

JSON

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.

CPENameOperatorVersion
omeka-seq3.0.0
omeka-seq2.1.2
omeka-seq3.0.1
omeka-seq3.1.1
omeka-seq1.1.1
omeka-seq4.0.0-rc
omeka-seq3.1.2
omeka-seq4.0.1
omeka-seq1.4.0
omeka-seq1.0.0-beta4

Name	Operator	Version
omeka-s	eq	3.0.0
omeka-s	eq	2.1.2
omeka-s	eq	3.0.1
omeka-s	eq	3.1.1
omeka-s	eq	1.1.1
omeka-s	eq	4.0.0-rc
omeka-s	eq	3.1.2
omeka-s	eq	4.0.1
omeka-s	eq	1.4.0
omeka-s	eq	1.0.0-beta4

Rows per page:

1-10 of 411

References

github.com/omeka/omeka-s/commit/4482f4fc0f3a66c5ef058c4be9fabf3c29a105af

huntr.dev/bounties/d4302a0d-db62-4d76-93dd-e6e6473e057a