Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 3:17 a.m.•15 views

CVE-2023-23277

Snippet-box 1.0.0 is vulnerable to Cross Site Scripting XSS. Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field...

6.1CVSS6.2AI score0.00669EPSS
SaveExploits1References1
OSV
OSV
•added 2023/04/11 3:15 p.m.•14 views

CVE-2023-23277

Snippet-box 1.0.0 is vulnerable to Cross Site Scripting XSS. Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field...

6.1CVSS6.5AI score0.00669EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•17 views

Snippet Box 跨站脚本漏洞

Snippet Box is a simple self-hosted application for pawelmalak individual developers. It is used to organize code snippets. A security vulnerability exists in Snippet-box version 1.0.0. An attacker can exploit the vulnerability to see arbitrary web script or HTML in the "Snippet code" form field...

6.1CVSS6.6AI score0.00669EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•3 views

PT-2023-18884

Name of the Vulnerable Software and Affected Versions Snippet-box version 1.0.0 Description The issue allows remote attackers to render arbitrary web script or HTML from the Snippet code form field, which is a Cross Site Scripting XSS vulnerability. This enables attackers to execute malicious...

6.1CVSS6.2AI score0.00669EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•6 views

CVE-2023-23277: Improper Neutralization of Input During Web Page Generation

Snippet-box 1.0.0 is vulnerable to Cross Site Scripting XSS. Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field...

6.1CVSS5.9AI score0.00669EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/17 12:00 a.m.•3 views

PT-2022-19610

Name of the Vulnerable Software and Affected Versions Code Snippets Extended plugin versions 1.4.7 and earlier Description The issue is related to a Persistent Cross-Site Scripting XSS vulnerability. It can be exploited via Cross-Site Request Forgery CSRF and involves vulnerable parameters title...

6.1CVSS0.00388EPSS
SaveExploits0References4
Rows per page
Query Builder