Lucene search
GoogleOSV:GHSA-3H7V-WQW7-FF28HistoryMay 24, 2022 - 10:28 p.m.
Cross site scripting in publify
2022-05-2422:28:08
Google
osv.dev
7
publify
xss
file upload
javascript
security vulnerability
EPSS
0.001
Percentile
19.4%
In publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS as a result of an unrestricted file upload. This issue allows a user with “publisher” role to inject malicious JavaScript via the uploaded html file.
Related
osv
osv
BIT-publify-2021-25975
2024-03-06 11:04:20
CVE-2021-25975
2021-11-10 11:15:09
CVE-2021-25974
2021-11-10 11:15:07
cvelist
cvelist
cve
cve
CVE-2021-25974
2021-11-10 11:15:07
CVE-2021-25975
2021-11-10 11:15:09
prion
prion
Unrestricted file upload
2021-11-10 11:15:00
Design/Logic Flaw
2021-11-10 11:15:00
veracode
veracode
Cross-site Scripting (XSS)
2021-11-11 10:52:56
Cross-site Scripting (XSS)
2021-11-11 04:13:52
nvd
nvd
CVE-2021-25975
2021-11-10 11:15:09
CVE-2021-25974
2021-11-10 11:15:07
github
github
Cross site scripting in publify
2022-05-24 22:28:08
Cross site scripting in publify
2022-05-24 22:29:03
rubygems
rubygems
Cross site scripting in publify
2022-05-23 21:00:00
Cross site scripting in publify
2022-05-23 21:00:00