Lucene search
Veracode Vulnerability DatabaseVERACODE:35106HistoryApr 14, 2022 - 9:05 a.m.
Cross-site Scripting (XSS)
2022-04-1409:05:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
32.6%
froxlor/froxlor is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input via the customermail GET parameter allowing an attacker to input HTML tags which will be reflected in the login webpage.
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor/froxlor | le | 0.10.22 | |
| froxlor/froxlor | le | 0.10.22 |
Related
osv
osv
HTML Injection in Froxlor
2022-04-14 00:00:19
CVE-2020-29653
2022-04-13 13:15:07
cve
cve
CVE-2020-29653
2022-04-13 13:15:07
cvelist
cvelist
CVE-2020-29653
2022-04-13 12:02:10
github
github
HTML Injection in Froxlor
2022-04-14 00:00:19
nvd
nvd
CVE-2020-29653
2022-04-13 13:15:07
prion
prion
Input validation
2022-04-13 13:15:00