Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-62187
HistoryJun 20, 2022 - 12:00 a.m.

Haraj has cross-site scripting vulnerability

2022-06-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
cross-site scripting
haraj
saudi arabia
data validation filtering
dm components
post request
web script
html
vulnerability

EPSS

0.001

Percentile

29.8%

A cross-site scripting vulnerability exists in Haraj v3.7, a buying and selling platform from Haraj Saudi Arabia. The vulnerability stems from a lack of data validation filtering of user-supplied data and output in some DM components. An attacker could exploit this vulnerability to execute arbitrary Web script or HTML via a crafted POST request.

EPSS

0.001

Percentile

29.8%

Related for CNVD-2022-62187