Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2026/04/13 12:00 a.m.•10 views

CVE-2025-63743

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...

6.1AI score0.00233EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/13 12:00 a.m.•51 views

CVE-2025-63743

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...

0.00233EPSS
SaveExploits1References2
Rows per page
Query Builder