231 matches found
CVE-2023-1542 Business Logic Errors in answerdev/answer
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
PT-2023-17056 · Answerdev · Answer
Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.7 Description: The issue is related to Stored Cross-site Scripting XSS in the GitHub repository answerdev/answer. This type of attack allows an attacker to inject malicious scripts into a website, which...
CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6...
GHSA-VXHR-P2VP-7GF8 Answer vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...
GHSA-55VM-3VQ3-4JPC Answer vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
GHSA-5W78-V688-CX9Q Answer vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
Answer vulnerable to Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1239
Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1241
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1238
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1243
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1240
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1242
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1244
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1237
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1238
CVE-2023-1238 is a Stored XSS in answerdev/answer prior to 1.0.6. Affected: the Answer project (github.com/answerdev/answer); root cause: unsanitized/stored user input allowing script injection. Potential impact: browser-level script execution for affected users. Remediation: upgrade to version 1...
CVE-2023-1237
CVE-2023-1237 affects the GitHub project answerdev/answer prior to version 1.0.6. The issue is a Stored Cross-site Scripting (XSS) vulnerability in user-supplied content that is stored and later displayed. The provided connected documents confirm the vulnerability type (XSS) and affected version ...
CVE-2023-1245
CVE-2023-1245 corresponds to a Stored XSS in the Answer app (github.com/answerdev/answer) prior to version 1.0.6. Multiple sources confirm that the vulnerability exists in that repository before 1.0.6; remediation is to upgrade to 1.0.6 or later. The connected documents do not provide exploit det...