icon

We found results for “

WS-2022-0293

Good to know:

icon

Date: August 22, 2022

In corebos, the value for the stufftype parameter is reflected in the web context without proper filtering in place resulting in possibility to execute malicious javascript code.

Language: PHP

Severity Score

Severity Score

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/tsolucio/corebos/commit/e41c4f405ea203ceea5ec9b5b34da34904092f4f

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us