PT-2022-20674
CVE-2022-31299
·
تاريخ النشر
2022-06-16
·
تاريخ التحديث
2022-06-27
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Haraj version 3.7
Description
A reflected cross-site scripting (XSS) issue was found in the User Upgrade Form. This could potentially allow attackers to inject malicious scripts into the website, affecting users who interact with the compromised form.
Recommendations
For Haraj version 3.7, update the User Upgrade Form to properly sanitize user input and prevent XSS attacks. As a temporary workaround, consider restricting access to the User Upgrade Form until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾