Lucene search
Veracode Vulnerability DatabaseVERACODE:27971HistoryNov 24, 2020 - 4:57 a.m.
Cross-Site Scripting (XSS)
2020-11-2404:57:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
19.5%
october/backend is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript code in a user’s browser via a malicious SVG file upload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| october/backend | le | 1.0.468 |
Related
cve
cve
CVE-2020-15249
2020-11-23 20:15:12
huntr
huntr
Cross-site Scripting (XSS) - Stored in octobercms/library
2021-04-03 03:30:03
osv
osv
CVE-2020-15249
2020-11-23 20:15:12
Stored XSS by authenticated backend user with access to upload files
2020-11-23 19:47:59
cvelist
cvelist
github
github
Stored XSS by authenticated backend user with access to upload files
2020-11-23 19:47:59
prion
prion
Double free
2020-11-23 20:15:00
nvd
nvd
CVE-2020-15249
2020-11-23 20:15:12