Lucene search
Veracode Vulnerability DatabaseVERACODE:47258HistoryMay 30, 2024 - 6:00 a.m.
Cross-site Scripting (XSS)
2024-05-3006:00:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
cross-site scripting
vulnerability
getformwork/formwork
sanitization
markdown
editing permissions
6.4 Medium
AI Score
Confidence
High
getformwork/formwork is vulnerable to Cross-site Scripting (XSS). The vulnerability is caused due to insufficient sanitization of markdown fields, allowing users with page editing permissions to insert `
| CPE | Name | Operator | Version |
|---|---|---|---|
| getformwork/formwork | le | 1.12.1 | |
| getformwork/formwork | le | 1.12.1 |
Related
nvd
nvd
CVE-2024-35621
2024-05-28 16:15:16
cvelist
cvelist
CVE-2024-35621
1976-01-01 00:00:00
osv
osv
CVE-2024-35621
2024-05-28 16:15:16
formwork Cross-site scripting vulnerability in Markdown fields
2024-05-28 16:54:31
cve
cve
CVE-2024-35621
2024-05-28 16:15:16
github
github
formwork Cross-site scripting vulnerability in Markdown fields
2024-05-28 16:54:31