Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/28 12:00 a.m.•6 views

CVE-2023-39708: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References2
Rows per page
Query Builder