Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2022/06/08 4:15 p.m.•10 views

CVE-2022-30899

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/partcategories...

4.8CVSS5.8AI score0.00471EPSS
SaveExploits0References2
CVE
CVE
•added 2022/06/08 3:51 p.m.•530 views

CVE-2022-30899

CVE-2022-30899 describes a Cross Site Scripting vulnerability in PartKeepr 1.4.0, exploitable via the name field in /api/part_categories. The issue stems from improper input handling that allows injected JavaScript when rendering the name, enabling potential code execution in a user’s browser. Af...

4.8CVSS5AI score0.00471EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2022/06/08 3:51 p.m.•22 views

CVE-2022-30899

A Cross Site Scripting vulnerabilty exists in PartKeepr 1.4.0 via the 'name' field in /api/partcategories...

6.5AI score
SaveExploits0References3
Rows per page
Query Builder