2 matches found
Cross site scripting
In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...
4.3CVSS5.9AI score0.0164EPSS
SaveExploits1References5Affected Software1
CVE-2021-44217: Improper Neutralization of Input During Web Page Generation
In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting XSS vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API...
6.1CVSS6AI score0.0164EPSS
SaveExploits1References2
20