Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•24 views

CVE-2024-8027 Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything

A stored Cross-Site Scripting XSS vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS attacks during user chats. This vulnerability affects all versions prior to the fix...

6.1CVSS0.00349EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:10 a.m.•7 views

CVE-2024-8027 Stored Cross-Site Scripting (XSS) in netease-youdao/QAnything

A stored Cross-Site Scripting XSS vulnerability exists in netease-youdao/QAnything. Attackers can upload malicious knowledge files to the knowledge base, which can trigger XSS attacks during user chats. This vulnerability affects all versions prior to the fix...

6.1CVSS5.8AI score0.00349EPSS
SaveExploits1References1
Rows per page
Query Builder