Misskey 输入验证错误漏洞

Misskey is a perpetually free open source federated social media platform from Misskey Open Source. An input validation error vulnerability exists in Misskey versions 12.29.0 through prior to 2024.11.0-alpha.3, which stems from a lack of validation and allows an attacker to take control of a targ...

ERPNext 跨站脚本漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. A security vulnerability exists in ERPNext version 12.29.0 that stems from not neutralizing user-controllable inputs...

PT-2022-19096 · Frappe · Frappe Erpnext

Name of the Vulnerable Software and Affected Versions: Frappe ERPNext version 12.29.0 Description: The issue arises from the software's failure to properly neutralize user-controllable input before it is placed in output that is used as a web page served to other users, leading to a potential XSS...