Lucene search
K

4 matches found

OSV
OSV
added 2024/08/30 5:18 p.m.11 views

GO-2024-3086 Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036) in github.com/casdoor/casdoor

Casdoor has reflected XSS in QrCodePage.js GHSL-2024-036 in github.com/casdoor/casdoor...

6.1CVSS5.9AI score0.00423EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2024/08/22 5:17 p.m.24 views

Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036)

Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...

6.1CVSS6.1AI score0.00423EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/08/22 5:17 p.m.11 views

GHSA-GV2P-4MVG-G32H Casdoor has reflected XSS in QrCodePage.js (GHSL-2024-036)

Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...

6.1CVSS6.1AI score0.00423EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/08/20 8:11 p.m.13 views

CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js

Casdoor is a UI-first Identity and Access Management IAM / Single-Sign-On SSO platform. In Casdoor 1.577.0 and earlier, he purchase URL that is created to generate a WechatPay QR code is vulnerable to reflected XSS. When purchasing an item through casdoor, the product page allows you to pay via...

6.1CVSS6.2AI score0.00423EPSS
Exploits1References2
Rows per page
Query Builder