Lucene search
Veracode Vulnerability DatabaseVERACODE:40409HistoryMay 08, 2023 - 5:41 a.m.
Cross-Site Scripting (XSS)
2023-05-0805:41:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
craftcms
asset.php
javascript
vulnerability
0.0005 Low
EPSS
Percentile
18.4%
craftcms/cms is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of user-input sanitization in Craft parameter of Asset.php which allows an attacker to inject and execute arbitrary JavaScript into the browser.
Related
osv
osv
CVE-2023-30177
2023-04-25 18:15:09
Cross Site Scripting in CraftCMS
2023-04-25 18:30:23
cvelist
cvelist
CVE-2023-30177
2023-04-25 00:00:00
github
github
Cross Site Scripting in CraftCMS
2023-04-25 18:30:23
cve
cve
CVE-2023-30177
2023-04-25 18:15:09
prion
prion
Cross site scripting
2023-04-25 18:15:00
nvd
nvd
CVE-2023-30177
2023-04-25 18:15:09
thn
thn