Lucene search

K
osvGoogleOSV:GHSA-QVP5-MM7V-4F36
HistoryOct 29, 2020 - 7:40 p.m.

Cross-site Scripting in Strapi

2020-10-2919:40:08
Google
osv.dev
10

0.001 Low

EPSS

Percentile

19.4%

Strapi before 3.2.5 has stored XSS in the wysiwyg editor’s preview feature.

CPENameOperatorVersion
strapi-plugin-content-managerlt3.2.5

0.001 Low

EPSS

Percentile

19.4%