Lucene search
Veracode Vulnerability DatabaseVERACODE:38452HistoryDec 13, 2022 - 6:09 a.m.
Cross-site Scripting (XSS)
2022-12-1306:09:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
github.com
remote attacker
javascript
useradmin page
lack of sanitization
vulnerable system
malicious execute.
EPSS
0.001
Percentile
25.0%
github.com/alist-org/alist is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in useradmin page which allows a remote attacker to inject and execute malicious javascript on the system.
Related
prion
prion
Cross site scripting
2022-12-12 14:15:00
osv
osv
Alist Cross-site Scripting vulnerability
2022-12-12 15:30:31
CVE-2022-45970
2022-12-12 14:15:10
gitlab
gitlab
nvd
nvd
CVE-2022-45970
2022-12-12 14:15:10
cvelist
cvelist
CVE-2022-45970
2022-12-12 00:00:00
github
github
Alist Cross-site Scripting vulnerability
2022-12-12 15:30:31
cve
cve
CVE-2022-45970
2022-12-12 14:15:10