Lucene search
+L

7 matches found

Mend
Mend
•added 2022/12/21 11:14 p.m.•7 views

CVE-2022-25929

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

5.4CVSS0.00868EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2022/12/21 11:14 p.m.•48 views

CVE-2022-25929 Cross-site Scripting (XSS)

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

5.4CVSS5.5AI score0.00868EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2022/12/21 5:15 a.m.•28 views

CVE-2022-25929 Cross-site Scripting (XSS)

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

5.4CVSS6.1AI score
SaveExploits0References7
Prion
Prion
•added 2022/12/21 5:15 a.m.•24 views

Cross site scripting

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

5.8CVSS5.2AI score0.00868EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2022/12/21 12:00 a.m.•30 views

Smoothie cross-site scripting vulnerabilities

smoothie is a smoooooth JavaScript chart for real-time streaming data by Joe Walnes, a personal developer. A security vulnerability exists in smoothie version 1.31.0 through versions prior to 1.36.1, which stems from a cross-site scripting XSS vulnerability due to improperly cleaned up user input...

5.4CVSS5.4AI score0.00868EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•5 views

CVE-2022-25929: Improper Neutralization of Input During Web Page Generation

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

5.4CVSS6.2AI score0.00868EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•5 views

PT-2022-17607

Name of the Vulnerable Software and Affected Versions smoothie versions 1.31.0 through 1.36.1 Description The issue arises from improper user input sanitization in strokeStyle and tooltipLabel properties, leading to Cross-site Scripting XSS. This can be exploited when a user has control over thes...

5.4CVSS0.00868EPSS
SaveExploits1References11
Rows per page
Query Builder