Lucene search
Veracode Vulnerability DatabaseVERACODE:35934HistoryJun 11, 2022 - 5:29 a.m.
Cross-site Scripting (XSS)
2022-06-1105:29:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
21.6%
francoisjacquet/rosariosis is vulnerable to cross-site scripting. The vulnerability exists because it does not escape HTML entities from URL in PreparePHP_SELF.fnc.php, allowing an attacker to inject and execute malicious script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | eq | v9.0 | |
| francoisjacquet/rosariosis | eq | v9.0 |
Related
osv
osv
CVE-2022-2036
2022-06-09 17:15:09
Cross site scripting in francoisjacquet/rosariosis
2022-06-10 00:00:55
cvelist
cvelist
nvd
nvd
CVE-2022-2036
2022-06-09 17:15:09
huntr
huntr
Bypass filter - Stored XSS in Resources
2022-06-07 12:10:48
cve
cve
CVE-2022-2036
2022-06-09 17:15:09
prion
prion
Cross site scripting
2022-06-09 17:15:00
github
github
Cross site scripting in francoisjacquet/rosariosis
2022-06-10 00:00:55