Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87347
HistoryOct 12, 2022 - 12:00 a.m.

CREALOGIX EBICS Cross-Site Scripting Vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
crealogix ebics
cross-site scripting
version 7.0
filtering
escaping
user-supplied data
ebics.aspx file
xss attack

EPSS

0.001

Percentile

25.9%

A cross-site scripting vulnerability exists in CREALOGIX EBICS version 7.0, which stems from the lack of effective filtering and escaping of user-supplied data in the /ebics-server/ebics.aspx file, which could be exploited to inject cross-site code and launch XSS attack.

EPSS

0.001

Percentile

25.9%

Related for CNVD-2022-87347