Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/06/06 12:45 a.m.24 views

JStachio XSS vulnerability: Unescaped single quotes

Impact Description: JStachio fails to escape single quotes ' in HTML, allowing an attacker to inject malicious code. Reproduction Steps: Use the following template code: html Set the value variable to ' onblur='alert1. java public class Escaping public static void mainString args Model model = ne...

6.1CVSS7.3AI score0.00579EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder