CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2019/01/29 6:29 p.m.•37 views

CVE-2019-7173

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...

4.8CVSS5AI score0.0061EPSS

SaveExploits1References1

Mend•added 2019/01/29 6:00 p.m.•9 views

CVE-2019-7173

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...

4.8CVSS0.0061EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2019/01/29 12:00 a.m.•13 views

CVE-2019-7173: Improper Neutralization of Input During Web Page Generation

A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...

4.8CVSS6AI score0.0061EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by