Cross site scripting in francoisjacquet/rosariosis

2022-06-1000:00:55

Google

osv.dev

0.001 Low

EPSS

Percentile

21.6%

JSON

A Cross-site Scripting (XSS) vulnerability exists in in GitHub repository francoisjacquet/rosariosis prior to 9.1. HTML entities are not properly decoded from the URL.

CPENameOperatorVersion
francoisjacquet/rosariosiseq5.8.1
francoisjacquet/rosariosiseq8.9.3
francoisjacquet/rosariosiseq8.0.3
francoisjacquet/rosariosiseq5.0.2
francoisjacquet/rosariosiseq5.5-beta
francoisjacquet/rosariosiseq8.9.4
francoisjacquet/rosariosiseq6.7
francoisjacquet/rosariosiseq5.4.3
francoisjacquet/rosariosiseq5.6
francoisjacquet/rosariosiseq8.5

Name	Operator	Version
francoisjacquet/rosariosis	eq	5.8.1
francoisjacquet/rosariosis	eq	8.9.3
francoisjacquet/rosariosis	eq	8.0.3
francoisjacquet/rosariosis	eq	5.0.2
francoisjacquet/rosariosis	eq	5.5-beta
francoisjacquet/rosariosis	eq	8.9.4
francoisjacquet/rosariosis	eq	6.7
francoisjacquet/rosariosis	eq	5.4.3
francoisjacquet/rosariosis	eq	5.6
francoisjacquet/rosariosis	eq	8.5