2 matches found
GHSA-X397-5HRV-J9M9 Cachet has Stored XSS in Incident Component
Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...
4.8CVSS5.8AI score0.00355EPSS
SaveExploits0References4
Cachet has Stored XSS in Incident Component
Summary A stored Cross-Site Scripting XSS vulnerability exists in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that executes in the browser of any user who views the status page, potentially leading to session token theft and account takeover...
4.8CVSS5.8AI score0.00355EPSS
SaveExploits0References4Affected Software1
20