Lucene search
+L

11 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 8:31 p.m.19 views

YAFNET has Unauthenticated Stored Second-Order XSS in Admin Event Log via Reflected `User-Agent` Header

Description: Stored second-order Cross-Site Scripting XSS occurs when attacker-controlled input is persisted through one component of an application and later rendered, without proper sanitization or contextual output encoding, by a completely different component — often one that implicitly trust...

8.1CVSS5.9AI score0.00282EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder