Lucene search
Veracode Vulnerability DatabaseVERACODE:25892HistoryJul 16, 2020 - 4:14 a.m.
Cross-Site Scripting (XSS)
2020-07-1604:14:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
51.4%
francoisjacquet/rosariosis is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the tab parameter in Preferences.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | le | 6.7.2 |
References
exchange.xforce.ibmcloud.com/vulnerabilities/184942
gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md
gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a
gitlab.com/francoisjacquet/rosariosis/-/issues/291
gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta
Related
cvelist
cvelist
CVE-2020-15716
2020-07-15 19:00:44
prion
prion
Input validation
2020-07-15 19:15:00
cve
cve
CVE-2020-15716
2020-07-15 19:15:12
nvd
nvd
CVE-2020-15716
2020-07-15 19:15:12
osv
osv
CVE-2020-15716
2020-07-15 19:15:12