Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2023/02/21 3:30 p.m.26 views

Baremetrics date range picker vulnerable to Cross-site Scripting

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting XSS when handling untrusted placeholder entries. An attacker who is able to influence the field placeholder when...

6.1CVSS5.7AI score0.00533EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/02/21 3:15 p.m.22 views

CVE-2021-32859

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting XSS when handling untrusted placeholder entries. An attacker who is able to influence the field placeholder when...

6.1CVSS6AI score0.00533EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/02/20 12:0 a.m.37 views

CVE-2021-32859 Baremetrics date range picker vulnerable to Cross-site Scripting

The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting XSS when handling untrusted placeholder entries. An attacker who is able to influence the field placeholder when...

6.1CVSS6.1AI score0.00533EPSS
SaveExploits1References2
Rows per page
Query Builder