1 matches found
CVE-2023-50069: Improper Neutralization of Input During Web Page Generation
WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting SXSS through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area...
6.1CVSS6.3AI score0.00442EPSS
SaveExploits1References2
20