Lucene search
+L

1157 matches found

Mend
Mend
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1239

Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...

7CVSS0.00526EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1242: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•19 views

answer 跨站脚本漏洞

answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in versions of answer prior to 1.0.6. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

6CVSS5.3AI score0.00526EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1243: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5.8AI score0.00526EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/03/07 12:00 a.m.•65 views

CVE-2023-1243 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5.2AI score0.00526EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•15 views

PT-2023-16833 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

6CVSS5.8AI score0.00526EPSS
SaveExploits1References11
CVE
CVE
•added 2023/03/07 12:00 a.m.•106 views

CVE-2023-1243

CVE-2023-1243 describes a Stored Cross-site Scripting (XSS) vulnerability in the open‑source knowledge base software answerdev/answer prior to version 1.0.6. Root cause: user input stored by the application is displayed without proper sanitization, enabling script injection. Affected product: ans...

6CVSS5.8AI score0.00526EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/03/07 12:00 a.m.•39 views

CVE-2023-1240 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS7.2AI score
SaveExploits0References4
Mend
Mend
•added 2023/03/07 12:00 a.m.•4 views

CVE-2023-1237

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS0.0044EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•4 views

CVE-2023-1237: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.8AI score0.0044EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•5 views

CVE-2023-1238: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

7.6CVSS5.8AI score0.00553EPSS
SaveExploits1References3
Mend
Mend
•added 2023/03/07 12:00 a.m.•4 views

CVE-2023-1243

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

7CVSS0.00526EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2023/03/07 12:00 a.m.•8 views

CVE-2023-1240 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.9AI score0.0062EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1245: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.8AI score0.00522EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•16 views

answer 跨站脚本漏洞

answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in versions of answer prior to 1.0.6. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

6CVSS5.3AI score0.00526EPSS
SaveExploits1References3
Mend
Mend
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1245

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS0.00522EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1240: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•23 views

answer 跨站脚本漏洞

Answer is an open source knowledge-based community software. You can quickly use it to build Q&A communities for your products, customers, teams and more. Answer has a cross-site scripting vulnerability in versions prior to 1.0.6. The vulnerability stems from the fact that when answering added ne...

8CVSS6.1AI score0.0062EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/07 12:00 a.m.•72 views

CVE-2023-1237

CVE-2023-1237 affects the GitHub project answerdev/answer prior to version 1.0.6. The issue is a Stored Cross-site Scripting (XSS) vulnerability in user-supplied content that is stored and later displayed. The provided connected documents confirm the vulnerability type (XSS) and affected version ...

5.4CVSS5.6AI score0.0044EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•9 views

PT-2023-16835 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

5.4CVSS4.1AI score0.00522EPSS
SaveExploits1References11
Rows per page
Query Builder