Lucene search
Veracode Vulnerability DatabaseVERACODE:38759HistoryJan 03, 2023 - 4:26 p.m.
Argument Injection
2023-01-0316:26:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
froxlor
argument injection
vulnerability
library
html
theme parameter
0.001 Low
EPSS
Percentile
20.1%
froxlor/froxlor is vulnerable to argument injection. The vulnerability exists in the multiple functions in the library, allowing an attacker to inject and execute malicious HTML through the theme parameter
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor/froxlor | le | 0.10.38.3 | |
| froxlor/froxlor | le | 0.10.38.3 |
Related
prion
prion
Design/Logic Flaw
2022-12-30 23:15:00
osv
osv
Froxlor vulnerable to Argument Injection
2022-12-31 00:30:21
CVE-2022-4864
2022-12-30 23:15:11
huntr
huntr
Authenticated HTMLi via theme parameter on /lib/ajax.php
2022-12-30 20:19:43
cve
cve
CVE-2022-4864
2022-12-30 23:15:11
cvelist
cvelist
CVE-2022-4864 Argument Injection in froxlor/froxlor
2022-12-30 00:00:00
nvd
nvd
CVE-2022-4864
2022-12-30 23:15:11
github
github
Froxlor vulnerable to Argument Injection
2022-12-31 00:30:21