Lucene search
Veracode Vulnerability DatabaseVERACODE:37733HistoryNov 01, 2022 - 5:57 a.m.
Cross-Site Scripting (XSS)
2022-11-0105:57:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
45
cross-site scripting
processwire
vulnerability
search
javascript
arbitrary
0.001 Low
EPSS
Percentile
33.5%
processwire is vulnerable to cross-site scripting. The vulnerability is due to lack of sanitization in the search users and search pages functions which allows an attacker to inject and execute arbitrary JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| processwire/processwire | le | 3.0.200 | |
| processwire/processwire | le | 3.0.200 |
Related
github
github
ProcessWire vulnerable to Cross-site Scripting
2022-10-31 19:00:37
cve
cve
CVE-2022-40487
2022-10-31 12:15:10
nvd
nvd
CVE-2022-40487
2022-10-31 12:15:10
osv
osv
ProcessWire vulnerable to Cross-site Scripting
2022-10-31 19:00:37
CVE-2022-40487
2022-10-31 12:15:10
cvelist
cvelist
CVE-2022-40487
2022-10-31 00:00:00
prion
prion
Cross site scripting
2022-10-31 12:15:00