Lucene search

K
osvGoogleOSV:GHSA-CV24-VH45-4HJM
HistoryMay 24, 2022 - 7:18 p.m.

Foxlor cross-site scripting (XSS) vulnerability

2022-05-2419:18:34
Google
osv.dev
3

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Multiple cross-site scripting (XSS) vulnerabilities in the Customer Add module of Foxlor v0.10.16 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields.

CPENameOperatorVersion
froxlor/froxloreq0.10.16

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Related for OSV:GHSA-CV24-VH45-4HJM