144 matches found
Cross site scripting
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
3.5CVSS5.6AI score0.01092EPSS
SaveExploits1References1Affected Software1
CVE-2017-1000478
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
5.4CVSS5.8AI score
SaveExploits0References1
CVE-2017-1000478
ELabftw 1.7.8 is vulnerable to a stored cross-site scripting (XSS) flaw in the experiment infos component. The issue arises from unsanitized input stored and executed in the browser, enabling arbitrary JavaScript execution and denial of service. No remediation or patch details are provided in the...
5.4CVSS5.5AI score0.01092EPSS
SaveExploits1References1Affected Software1
20