HTML Injection

2022-11-0804:21:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

froxlor

html injection

vulnerability

index.php

0.001 Low

EPSS

Percentile

36.3%

JSON

froxlor is vulnerable to HTML Injection. The vulnerability exists due to index.php which allows an attacker to inject and execute malicious HTML content into the login webpage.

CPENameOperatorVersion
froxlor/froxlorle0.10.38.1
froxlor/froxlorle0.10.38.1

CPE	Name	Operator	Version
	froxlor/froxlor	le	0.10.38.1
	froxlor/froxlor	le	0.10.38.1

References

github.com/advisories/GHSA-6rjv-xxgr-v57x

github.com/froxlor/froxlor/commit/3f10a4adede9df83408d60ded78b51b812a763a8

huntr.dev/bounties/7de20f21-4a9b-445d-ae2b-15ade648900b

huntr.dev/bounties/7de20f21-4a9b-445d-ae2b-15ade648900b/

0.001 Low

EPSS

Percentile

36.3%

JSON

Related for VERACODE:37834