CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/SC:N/VI:H/SI:N/VA:N/SA:N/U:Clear/RE:M
EPSS
Percentile
14.5%
Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in userβs browser session
[
{
"defaultStatus": "unaffected",
"product": "Hubshare",
"vendor": "M-Files Corporation",
"versions": [
{
"lessThan": "5.0.6.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]