Lucene search
Veracode Vulnerability DatabaseVERACODE:32901HistoryNov 11, 2021 - 4:13 a.m.
Cross-site Scripting (XSS)
2021-11-1104:13:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
19.5%
publify_core is vulnerable to cross-site scripting. An attacker with a publisher role can inject and execute malicious javascript while creating a page or article.
| CPE | Name | Operator | Version |
|---|---|---|---|
| publify_core | le | 9.2.4 | |
| publify_core | le | 9.2.4 |
Related
cvelist
cvelist
CVE-2021-25974 Publify - Stored Cross-Site Scripting (XSS) in Editor
2021-11-10 11:10:12
cve
cve
CVE-2021-25974
2021-11-10 11:15:07
prion
prion
Design/Logic Flaw
2021-11-10 11:15:00
osv
osv
BIT-publify-2021-25974
2024-03-06 11:04:29
Cross site scripting in publify
2022-05-24 22:29:03
CVE-2021-25974
2021-11-10 11:15:07
github
github
Cross site scripting in publify
2022-05-24 22:29:03
nvd
nvd
CVE-2021-25974
2021-11-10 11:15:07