Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06896
HistoryJan 12, 2022 - 12:00 a.m.

keystone cross-site scripting vulnerability

2022-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

41.7%

Keystone is one of the most powerful Node.js headless Cms. used to help you build and scale faster than any other Cms or application framework. keystone suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in web applications. An attacker could exploit this vulnerability to execute client-side code.

CPENameOperatorVersion
keystonejs keystonelt1.0.2

0.001 Low

EPSS

Percentile

41.7%