2 matches found
Cross site scripting
webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /linkedcontent/listfiles.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add"...
4.9CVSS5.3AI score0.00433EPSS
SaveExploits1References2Affected Software1
CVE-2022-44953: Improper Neutralization of Input During Web Page Generation
webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /linkedcontent/listfiles.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field after clicking "Add"...
5.4CVSS6.1AI score0.00433EPSS
SaveExploits1References4
20