Lucene search
+L

5 matches found

NVD
NVD
•added 2024/02/22 2:15 p.m.•20 views

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

5.4CVSS7.8AI score0.00482EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/22 12:00 a.m.•23 views

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

8.2AI score0.00482EPSS
SaveExploits1References2
CVE
CVE
•added 2024/02/22 12:00 a.m.•4061 views

CVE-2024-25873

The Enhavo CMS (version v0.13.1 ) is susceptible to an HTML injection vulnerability within the Author text field of the Blockquote module . An attacker can leverage this flaw by providing a specially crafted payload to execute arbitrary code . To mitigate this risk, it is recommended to disable t...

8.1AI score0.00482EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/02/22 12:00 a.m.•34 views

CVE-2024-25873

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

8AI score0.00482EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•1 views

CVE-2024-25873: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Blockquote module. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

5.4CVSS6.5AI score0.00482EPSS
SaveExploits1References2
Rows per page
Query Builder