Lucene search
Veracode Vulnerability DatabaseVERACODE:27648HistoryOct 23, 2020 - 4:14 a.m.
Cross-Site Scripting (XSS)
2020-10-2304:14:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
19.4%
strapi-plugin-content-manager is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript in a user’s browser via the WYSIWYG editor’s preview feature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| strapi-plugin-content-manager | le | 3.2.4 |
Related
nvd
nvd
CVE-2020-27666
2020-10-22 19:15:13
githubexploit
githubexploit
Exploit for Cross-site Scripting in Strapi
2020-12-01 09:45:48
osv
osv
Cross-site Scripting in Strapi
2020-10-29 19:40:08
CVE-2020-27666
2020-10-22 19:15:13
prion
prion
Cross site scripting
2020-10-22 19:15:00
cve
cve
CVE-2020-27666
2020-10-22 19:15:13
github
github
Cross-site Scripting in Strapi
2020-10-29 19:40:08
cvelist
cvelist
CVE-2020-27666
2020-10-22 18:19:19