Lucene search
Veracode Vulnerability DatabaseVERACODE:25891HistoryJul 16, 2020 - 4:06 a.m.
Cross-Site Scripting (XSS)
2020-07-1604:06:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.002
Percentile
51.3%
francoisjacquet/rosariosis is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the include_inactive parameter in PrintSchedules.php.
References
exchange.xforce.ibmcloud.com/vulnerabilities/184944
gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md
gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a
gitlab.com/francoisjacquet/rosariosis/-/issues/291
gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta
Related
prion
prion
Input validation
2020-07-15 20:15:00
cve
cve
CVE-2020-15718
2020-07-15 20:15:13
nvd
nvd
CVE-2020-15718
2020-07-15 20:15:13
osv
osv
CVE-2020-15718
2020-07-15 20:15:13
cvelist
cvelist
CVE-2020-15718
2020-07-15 19:02:52