Lucene search
+L

1059 matches found

NVD
NVD
•added 2023/03/07 8:15 a.m.•54 views

CVE-2023-1239

Cross-site Scripting XSS - Reflected in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5AI score0.00526EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•63 views

CVE-2023-1243

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5AI score0.00526EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•27 views

CVE-2023-1242

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.6AI score0.0062EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•51 views

CVE-2023-1240

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.6AI score0.0062EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/07 8:15 a.m.•33 views

CVE-2023-1237

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS4.5AI score0.0044EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/03/07 12:00 a.m.•23 views

CVE-2023-1237 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

3.4CVSS6.2AI score0.0044EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•2 views

CVE-2023-1241: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8.8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
CVE
CVE
•added 2023/03/07 12:00 a.m.•90 views

CVE-2023-1238

CVE-2023-1238 is a Stored XSS in answerdev/answer prior to 1.0.6. Affected: the Answer project (github.com/answerdev/answer); root cause: unsanitized/stored user input allowing script injection. Potential impact: browser-level script execution for affected users. Remediation: upgrade to version 1...

7.6CVSS6.7AI score0.00553EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2023/03/07 12:00 a.m.•74 views

CVE-2023-1245

CVE-2023-1245 corresponds to a Stored XSS in the Answer app (github.com/answerdev/answer) prior to version 1.0.6. Multiple sources confirm that the vulnerability exists in that repository before 1.0.6; remediation is to upgrade to 1.0.6 or later. The connected documents do not provide exploit det...

5.4CVSS5.6AI score0.00522EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/07 12:00 a.m.•9 views

CVE-2023-1241 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8.8CVSS6.2AI score0.0062EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/07 12:00 a.m.•9 views

PT-2023-16827 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

5.4CVSS4AI score0.0044EPSS
SaveExploits1References11
CVE
CVE
•added 2023/03/07 12:00 a.m.•72 views

CVE-2023-1241

CVE-2023-1241 is a stored XSS vulnerability in the open‑source knowledge base software answerdev/answer, affecting versions prior to 1.0.6. The issue arises when user-supplied input is stored and later rendered without proper sanitization, enabling script execution in a victim’s browser. Public r...

8.8CVSS6.9AI score0.0062EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/03/07 12:00 a.m.•40 views

CVE-2023-1237 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

3.4CVSS5.5AI score0.0044EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/07 12:00 a.m.•12 views

answer 跨站脚本漏洞

answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in versions of answer prior to 1.0.6. An attacker could exploit this vulnerability to perform a cross-site scripting attack...

6CVSS5.3AI score0.00526EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•3 views

CVE-2023-1244: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

9.3CVSS5.8AI score0.00519EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•1 views

CVE-2023-1240: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•2 views

CVE-2023-1238: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

7.6CVSS5.8AI score0.00553EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•1 views

CVE-2023-1243: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5.8AI score0.00526EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•1 views

CVE-2023-1242: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/07 12:00 a.m.•1 views

CVE-2023-1237: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

5.4CVSS5.8AI score0.0044EPSS
SaveExploits1References2
Rows per page
Query Builder