Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86309
HistoryNov 24, 2022 - 12:00 a.m.

Fusiondirectory Cross-Site Scripting Vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

0.003 Low

EPSS

Percentile

65.8%

FusionDIrectory is a FusionDIrectory open source application. A cross-site scripting vulnerability exists in Fusiondirectory version 1.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by attackers to launch cross-site scripting attacks.

CPENameOperatorVersion
fusiondirectory fusiondirectoryeq1.3