Lucene search
Veracode Vulnerability DatabaseVERACODE:32901HistoryNov 11, 2021 - 4:13 a.m.
Cross-site Scripting (XSS)
2021-11-1104:13:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
publify_core
publisher role
malicious javascript
article creation
page creation
software
EPSS
0.001
Percentile
19.4%
publify_core is vulnerable to cross-site scripting. An attacker with a publisher role can inject and execute malicious javascript while creating a page or article.
Related
cvelist
cvelist
CVE-2021-25974 Publify - Stored Cross-Site Scripting (XSS) in Editor
2021-11-10 11:10:12
cve
cve
CVE-2021-25974
2021-11-10 11:15:07
osv
osv
CVE-2021-25974
2021-11-10 11:15:07
Cross site scripting in publify
2022-05-24 22:29:03
BIT-publify-2021-25974
2024-03-06 11:04:29
github
github
Cross site scripting in publify
2022-05-24 22:29:03
rubygems
rubygems
Cross site scripting in publify
2022-05-23 21:00:00
nvd
nvd
CVE-2021-25974
2021-11-10 11:15:07
prion
prion
Design/Logic Flaw
2021-11-10 11:15:00