CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Veracode•added 2022/05/20 3:46 a.m.•41 views

Cross-site Scripting (XSS)

para-core is vulnerable to cross-site scripting. The vulnerability exists because the compileMustache function of Utils.java does not properly escape the HTML when compiling mustache templates, allowing an attacker to inject and execute malicious javascript...

6.1CVSS6AI score0.0098EPSS

SaveExploits1References4Affected Software1

Github Security Blog•added 2022/05/19 12:00 a.m.•28 views

Cross-site Scripting in com.erudika:para-core

Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...

9.4CVSS1.3AI score0.0098EPSS

SaveExploits1References4Affected Software1

OSV•added 2022/05/19 12:00 a.m.•15 views

GHSA-PHVW-R25P-8XV7 Cross-site Scripting in com.erudika:para-core

Cross-site Scripting XSS - Generic in GitHub repository erudika/para prior to v1.45.11...

9.4CVSS6.9AI score0.0098EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by