11 matches found
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
Cross-site Scripting (XSS)
bytefury/crater is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary code on victim's browser via a crafted .SVG file with Javascript embedded into it...
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
Cross site scripting
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
CVE-2022-0372
CVE-2022-0372 is a Stored XSS vulnerability in Crater’s packaging (bytefury/crater) prior to version 6.0.2. The issue is triggered by storing XSS content, allowing injected script to run in victims’ browsers. Affected software is Crater Invoice, specifically the bytefury/crater package before 6.0...
CVE-2022-0372 Cross-site Scripting (XSS) - Stored in crater-invoice/crater
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
CVE-2022-0372 Cross-site Scripting (XSS) - Stored in crater-invoice/crater
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
PT-2022-13133
Name of the Vulnerable Software and Affected Versions bytefury/crater versions prior to 6.0.2 Description The issue is related to a Cross-site Scripting XSS - Stored vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can then be executed...
