1 matches found
Stored XSS vulnerability in authorize-project
authorize-project 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. authorize-project 1.8.0 no longer evaluates a string...
8CVSS4.9AI score0.00687EPSS
SaveExploits0Affected Software1
20