Lucene search
Veracode Vulnerability DatabaseVERACODE:39181HistoryFeb 09, 2023 - 10:12 a.m.
Cross-site Scripting (XSS)
2023-02-0910:12:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
cross-site scripting
wikiseo
vulnerability
meta property tag handler
html elements
javascript injection
0.002 Low
EPSS
Percentile
54.6%
tinymighty/wiki-seo is vulnerable to Cross-Site Scripting (XSS). The vulnerability exist in the Meta Property Tag Handler parameter of WikiSEO.body.php due to the lack of validation in the html elements when adding a user which allows an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tinymighty/wiki-seo | le | 1.2.1 | |
| tinymighty/wiki-seo | le | 1.2.1 |
Related
nvd
nvd
CVE-2015-10073
2023-02-06 20:15:10
github
github
cve
cve
CVE-2015-10073
2023-02-06 20:15:10
cvelist
cvelist
prion
prion
Cross site scripting
2023-02-06 20:15:00
osv
osv