Lucene search
GoogleOSV:GHSA-J6QQ-9939-9JV8HistoryApr 15, 2023 - 3:30 p.m.
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
2023-04-1515:30:15
Google
osv.dev
5
easyappointments
stored cross-site scripting
vulnerability
software
patch
version 1.4.3
version 1.5.0
commit bddc5cbeb7ff237a72943b304dcb01c653781767
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.5%
alextselegidis/easyappointments is vulnerable to stored cross-site scripting in versions 1.4.3 and prior. A patch is available at commit bddc5cbeb7ff237a72943b304dcb01c653781767 and anticipated to be part of version 1.5.0.
Related
osv
osv
CVE-2023-2102
2023-04-15 13:15:45
prion
prion
Cross site scripting
2023-04-15 13:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-05-19 09:33:40
cvelist
cvelist
gitlab
gitlab
cve
cve
CVE-2023-2102
2023-04-15 13:15:45
nvd
nvd
CVE-2023-2102
2023-04-15 13:15:45
huntr
huntr
Stored XSS
2023-04-13 15:38:28
github
github
alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting
2023-04-15 15:30:15
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
34.5%
Related for OSV:GHSA-J6QQ-9939-9JV8