Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66670
HistoryJun 08, 2022 - 12:00 a.m.

bbs-go cross-site scripting vulnerability

2022-06-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

21.6%

bbs-go is an open source community system built using the Go language. bbs-go 3.3.0 and earlier versions have a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user data in the v-html tag of vue used by the application. An attacker could use this vulnerability to perform cross-site scripting attacks.

CPENameOperatorVersion
bbs-go bbs-gole3.0.0

0.001 Low

EPSS

Percentile

21.6%

Related for CNVD-2022-66670