6 matches found
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
7.6CVSS5.8AI score0.00613EPSS
SaveExploits1References1
CVE-2022-0372
creationtimestamp| type| source ---|---|--- 2022-01-27 12:20:30+00:00| seen| https://t.me/cibsecurity/36369...
7.6CVSS6.3AI score0.00613EPSS
SaveExploits1References1
CVE-2022-0372
Cross-site Scripting XSS - Stored in Packagist bytefury/crater prior to 6.0.2...
7.6CVSS0.00613EPSS
SaveExploits1References2
CVE-2022-0372
CVE-2022-0372 is a Stored XSS vulnerability in Crater’s packaging (bytefury/crater) prior to version 6.0.2. The issue is triggered by storing XSS content, allowing injected script to run in victims’ browsers. Affected software is Crater Invoice, specifically the bytefury/crater package before 6.0...
7.6CVSS5.3AI score0.00613EPSS
SaveExploits1References2Affected Software1
20