Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/29 12:00 a.m.•2 views

CVE-2023-50069: Improper Neutralization of Input During Web Page Generation

WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting SXSS through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area...

6.1CVSS6.3AI score0.00442EPSS
SaveExploits1References2
Rows per page
Query Builder