3 matches found
GHSA-R87W-47M8-22W3 Template Injection in jsrender
Affected versions of jsrender are susceptible to a remote code execution vulnerability when used with server delivered client-side tempates which dynamically embed user input. Proof of Concept js //POC-REQUEST for x!=1?constructor.constructor"return arguments.callee.caller":y10 :data /for js...
6.3CVSS7.4AI score0.10431EPSS
SaveExploits0References5
20