Lucene search
Veracode Vulnerability DatabaseVERACODE:26328HistoryAug 13, 2020 - 4:16 a.m.
Cross-Site Scripting (XSS)
2020-08-1304:16:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
49.7%
francoisjacquet/rosariosis is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbitrary Javascript in a user’s browser via the URL encode key in PreparePHP_SELF.php, leading to an admin session hijacking or executing arbitrary requests using the admin’s session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | le | 6.5.1 | |
| francoisjacquet/rosariosis | le | 6.5.1 |
Related
github
github
Reflected cross-site scripting in francoisjacquet/rosariosis
2021-05-06 18:54:48
osv
osv
CVE-2020-13278
2020-08-12 14:15:00
Reflected cross-site scripting in francoisjacquet/rosariosis
2021-05-06 18:54:48
cvelist
cvelist
CVE-2020-13278
2020-08-12 14:01:44
cve
cve
CVE-2020-13278
2020-08-12 14:15:12
prion
prion
Cross site scripting
2020-08-12 14:15:00
nvd
nvd
CVE-2020-13278
2020-08-12 14:15:12