Lucene search
+L

2 matches found

OSV
OSV
added 2025/11/30 3:30 a.m.13 views

GHSA-6QJ9-2G9M-29X9 Tryton sao allows XSS because it does not escape completion values

Tryton sao aka tryton-sao before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69...

5.4CVSS6.2AI score0.00165EPSS
SaveExploits0References4
CVE
CVE
added 2025/11/30 12:00 a.m.26 views

CVE-2025-66421

CVE-2025-66421 affects Tryton sao (tryton-sao) prior to 7.6.11, with an XSS vulnerability due to unescaped completion values. Affected versions are before 7.6.11, with fixes in 7.6.11, 7.4.21, 7.0.40, and 6.0.69. Impact is cross-site scripting; exploitation details are not provided in the cited d...

5.4CVSS5.9AI score0.00165EPSS
SaveExploits0References2
Rows per page
Query Builder