Lucene search
+L

3 matches found

ATTACKERKB
ATTACKERKB
added 2022/06/08 4:15 p.m.5 views

CVE-2022-30899

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/partcategories...

4.8CVSS5.8AI score0.00447EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/08 3:51 p.m.517 views

CVE-2022-30899

CVE-2022-30899 describes a Cross Site Scripting vulnerability in PartKeepr 1.4.0, exploitable via the name field in /api/part_categories. The issue stems from improper input handling that allows injected JavaScript when rendering the name, enabling potential code execution in a user’s browser. Af...

4.8CVSS5AI score0.00447EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/06/08 3:51 p.m.16 views

CVE-2022-30899

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/partcategories...

6.5AI score
SaveExploits0References3
Rows per page
Query Builder