Lucene search
GoogleOSV:GHSA-9V3W-M552-M6FFHistoryMay 13, 2022 - 1:06 a.m.
Pi Cross-site Scripting vulnerability
2022-05-1301:06:56
Google
osv.dev
2
A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the pi-develop/www/script/editor/markitup/preview/markdown.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pi/pi | eq | 2.5.0-alpha2 | |
| pi/pi | eq | 2.5.0 | |
| pi/pi | eq | 2.5.0-alpha3 | |
| pi/pi | eq | 2.5.0-alpha1 |
Related
cve
cve
CVE-2017-7251
2017-03-23 22:59:00
nvd
nvd
CVE-2017-7251
2017-03-23 22:59:00
prion
prion
Cross site scripting
2017-03-23 22:59:00
cvelist
cvelist
CVE-2017-7251
2017-03-23 22:00:00
osv
osv
CVE-2017-7251
2017-03-23 22:59:00
github
github
Pi Cross-site Scripting vulnerability
2022-05-13 01:06:56