Lucene search
+L

3 matches found

OSV
OSV
added 2019/06/13 6:59 p.m.4 views

GHSA-CRFX-5PHG-HMW9 Cross-Site Scripting in ids-enterprise

Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. Script tags in the soho-autocomplete component are not properly encoded and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later...

6.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/06/13 6:59 p.m.15 views

Cross-Site Scripting in ids-enterprise

Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. Script tags in the soho-autocomplete component are not properly encoded and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later...

5.2AI score
SaveExploits0References4Affected Software1
nodejs
nodejs
added 2019/06/10 8:43 p.m.18 views

Cross-Site Scripting

Overview Versions of ids-enterprise prior to 4.18.2 are vulnerable to Cross-Site Scripting XSS. Script tags in the soho-autocomplete component are not properly encoded and may allow attackers to execute arbitrary JavaScript. Recommendation Upgrade to version 4.18.2 or later References - GitHub...

6.7AI score
SaveExploits0Affected Software1
Rows per page
Query Builder