Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•6 views

CVE-2020-19281: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

5.4CVSS6.1AI score0.00558EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/09 12:00 a.m.•4 views

PT-2021-10321

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the "/manage/loginusername" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field. This enables the executi...

5.4CVSS0.00558EPSS
SaveExploits1References6
Rows per page
Query Builder