Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2022/10/25 12:50 a.m.•28 views

CVE-2022-36783 AlgoSec – FireFlow Reflected Cross-Site-Scripting (RXSS)

AlgoSec – FireFlow Reflected Cross-Site-Scripting RXSS A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user victim. JavaScript code is executed on...

6.5CVSS6.7AI score0.00391EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•4 views

CVE-2022-36783: Improper Neutralization of Input During Web Page Generation

AlgoSec – FireFlow Reflected Cross-Site-Scripting RXSS A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user victim. JavaScript code is executed on...

6.5CVSS5.9AI score0.00391EPSS
SaveExploits0References3
Rows per page
Query Builder