Lucene search
K

231 matches found

OSV
OSV
added 2023/03/07 12:0 a.m.31 views

CVE-2023-1243 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

6CVSS5.8AI score0.00526EPSS
Exploits1References4
CVE
CVE
added 2023/03/07 12:0 a.m.56 views

CVE-2023-1242

CVE-2023-1242: Cross-site Scripting (XSS) stored in the Answer software (github.com/answerdev/answer) prior to version 1.0.6. Affected component is likely user input that is not properly sanitized in answers/tags descriptions, enabling injected JavaScript via stored payloads. Documented in multip...

8CVSS5.5AI score0.0062EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/03/07 12:0 a.m.23 views

CVE-2023-1241 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.6...

8.8CVSS7.5AI score0.0062EPSS
Exploits1References4
CVE
CVE
added 2023/03/07 12:0 a.m.54 views

CVE-2023-1239

CVE-2023-1239 affects answerdev/answer prior to version 1.0.6. The vulnerability is a reflected Cross-site Scripting (XSS) flaw caused by including unsanitized user input in the output, enabling script execution in a victim’s browser. Impact is described as primarily confidentiality and integrity...

6CVSS5AI score0.00526EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/03/07 12:0 a.m.60 views

CVE-2023-1243

CVE-2023-1243 describes a Stored Cross-site Scripting (XSS) vulnerability in the open‑source knowledge base software answerdev/answer prior to version 1.0.6. Root cause: user input stored by the application is displayed without proper sanitization, enabling script injection. Affected product: ans...

6CVSS5AI score0.00526EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/03/07 12:0 a.m.64 views

CVE-2023-1238

CVE-2023-1238 is a Stored XSS in answerdev/answer prior to 1.0.6. Affected: the Answer project (github.com/answerdev/answer); root cause: unsanitized/stored user input allowing script injection. Potential impact: browser-level script execution for affected users. Remediation: upgrade to version 1...

7.6CVSS5.4AI score0.00553EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.3 views

PT-2023-16827 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject...

5.4CVSS4AI score0.0044EPSS
Exploits1References11
CVE
CVE
added 2023/03/07 12:0 a.m.50 views

CVE-2023-1245

CVE-2023-1245 corresponds to a Stored XSS in the Answer app (github.com/answerdev/answer) prior to version 1.0.6. Multiple sources confirm that the vulnerability exists in that repository before 1.0.6; remediation is to upgrade to 1.0.6 or later. The connected documents do not provide exploit det...

5.4CVSS4.4AI score0.00522EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2023/02/21 3:15 p.m.32 views

CVE-2023-0934

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...

6.3CVSS5.4AI score0.00393EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/02/21 12:0 a.m.2 views

PT-2023-16622 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.5 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository answerdev/answer. Cross-site Scripting XSS is a type of security vulnerability that occurs wh...

6.3CVSS6.2AI score0.00393EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2023/02/21 12:0 a.m.4 views

CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...

6.3CVSS5.9AI score0.00393EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/02/21 12:0 a.m.44 views

CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...

6.3CVSS5.5AI score0.00393EPSS
Exploits1References2
OSV
OSV
added 2023/02/21 12:0 a.m.26 views

CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...

6.3CVSS6.3AI score0.00393EPSS
Exploits1References4
CVE
CVE
added 2023/02/21 12:0 a.m.60 views

CVE-2023-0934

The CVE-2023-0934 entry describes a Cross-site Scripting (XSS) vulnerability stored in the GitHub project answerdev/answer, present in versions prior to 1.0.5. The vulnerability is categorized as stored XSS, indicating that user-supplied input is not properly filtered/escaped, enabling injected s...

6.3CVSS5.4AI score0.00393EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2023/02/08 9:30 a.m.18 views

GHSA-HJMR-XM25-36MH Answer subject to Cross-site Scripting vulnerability

Cross-site Scripting XSS - Generic in GitHub repository answerdev/answer prior to 1.0.4...

9CVSS8.4AI score0.00745EPSS
Exploits1References4
OSV
OSV
added 2023/02/08 9:30 a.m.17 views

GHSA-4CWH-8W4G-JXXH Answer contains Improper Access Control vulnerability

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

9.8CVSS9.4AI score0.06368EPSS
Exploits4References5
OSV
OSV
added 2023/02/08 9:30 a.m.17 views

GHSA-65PX-4CPF-697R Cross-site scripting vulnerability found in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

9CVSS8.3AI score0.00714EPSS
Exploits1References4
OSV
OSV
added 2023/02/08 9:30 a.m.20 views

GHSA-P7WJ-C85F-XQ9H Answer has Cross-site Scripting vulnerability

Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...

9CVSS8.2AI score0.00871EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/02/08 9:30 a.m.26 views

Answer contains Improper Access Control vulnerability

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4...

9.8CVSS9AI score0.06368EPSS
Exploits4References5Affected Software1
Github Security Blog
Github Security Blog
added 2023/02/08 9:30 a.m.21 views

Cross-site scripting vulnerability found in answerdev/answer

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...

9CVSS8.3AI score0.00714EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder