Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2020/04/10 7:15 p.m.•18 views

CVE-2020-9056

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of...

5.4CVSS6AI score0.00639EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/10 7:15 p.m.•29 views

CVE-2020-9056

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of...

5.4CVSS4.5AI score0.00639EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/04/10 6:35 p.m.•36 views

CVE-2020-9056 Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of...

3.9CVSS5.2AI score0.00639EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/04/10 12:00 a.m.•5 views

PT-2020-20464

Name of the Vulnerable Software and Affected Versions Periscope BuySpeed versions 14.5 through 15.2 Description The issue allows a local, authenticated attacker to store arbitrary JavaScript within the application, which is then executed in the user's browser without sanitization. This could lead...

5.4CVSS5.9AI score0.00639EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/10 12:00 a.m.•6 views

CVE-2020-9056: Improper Neutralization of Input During Web Page Generation

Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of...

5.4CVSS5.9AI score0.00639EPSS
SaveExploits0References3
CERT
CERT
•added 2020/04/06 12:00 a.m.•49 views

Periscope BuySpeed is vulnerable to stored cross-site scripting

Overview Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which may allow a local, authenticated attacker to execute arbitrary JavaScript. Description Periscope BuySpeed is a "tool to automate the full procure-to-pay process efficiently and intelligently". BuySpeed...

5.4CVSS5.1AI score0.00639EPSS
SaveExploits0References6
Rows per page
Query Builder