Description

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.

Remediation

References

https://hackerone.com/reports/403692

Related Vulnerabilities

CVE-2023-24831 Vulnerability in maven package org.apache.iotdb:iotdb-grafana-connector

CVE-2023-22849 Vulnerability in maven package org.apache.sling:org.apache.sling.cms.ui

CVE-2021-23490 Vulnerability in npm package parse-link-header

CVE-2023-35166 Vulnerability in maven package org.xwiki.platform:xwiki-platform-help-ui

CVE-2022-40764 Vulnerability in npm package snyk-go-plugin

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Vendor Advisory