Lucene search
+L

7 matches found

OSV
OSV
•added 2024/02/22 3:30 p.m.•23 views

GHSA-C579-HHW5-CR3P Enhavo Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1CVSS5.8AI score0.00424EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2024/02/22 3:30 p.m.•37 views

Enhavo Cross-site Scripting vulnerability

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1CVSS5.7AI score0.00424EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2024/02/22 2:15 p.m.•20 views

CVE-2024-25875

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1CVSS5.5AI score0.00424EPSS
SaveExploits1References2
Prion
Prion
•added 2024/02/22 2:15 p.m.•24 views

Cross site scripting

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1AI score0.00424EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•1 views

CVE-2024-25875: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1CVSS6.1AI score0.00424EPSS
SaveExploits1References2
OSV
OSV
•added 2024/02/22 12:00 a.m.•23 views

CVE-2024-25875

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

6.1CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/02/22 12:00 a.m.•38 views

CVE-2024-25875

A cross-site scripting XSS vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field...

5.7AI score0.00424EPSS
SaveExploits1References2
Rows per page
Query Builder