Lucene search

K
osvGoogleOSV:GHSA-3HWX-C6CP-Q972
HistoryMay 24, 2022 - 12:01 a.m.

Publify vulnerable to cross site scripting

2022-05-2400:01:35
Google
osv.dev
6
publify
software
unrestricted file upload
stored xss

EPSS

0.001

Percentile

21.4%

Unrestricted file upload allowed the attacker to manipulate the request and bypass the protection of HTML files using a text file. Stored XSS may be obtained.

EPSS

0.001

Percentile

21.4%