5 matches found
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
8.4CVSS6.9AI score0.0079EPSS
SaveExploits1References1
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
8.4CVSS0.0079EPSS
SaveExploits1References2
CVE-2022-2113
InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...
8.4CVSS6.9AI score0.0079EPSS
SaveExploits1References2Affected Software1
20