5 matches found
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
8.4CVSS5.8AI score0.00751EPSS
SaveExploits1References1
CVE-2022-2113
Cross-site Scripting XSS - Stored in GitHub repository inventree/inventree prior to 0.7.2...
8.4CVSS0.00751EPSS
SaveExploits1References2
CVE-2022-2113
InvenTree (open source inventory system) has a stored XSS vulnerability in versions prior to 0.7.2, arising from insufficient filtering/escaping of parameter data. The issue affects the part/description data stored and can lead to execution of malicious JavaScript on the client side when rendered...
8.4CVSS5.6AI score0.00751EPSS
SaveExploits1References2Affected Software1
20