PT-2023-12191
CVE-2021-32859
·
تاريخ النشر
2023-02-20
·
تاريخ التحديث
2023-03-02
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Baremetrics date range picker versions 1.0.14 and prior
Description
The issue is related to cross-site scripting (XSS) when handling untrusted
placeholder entries. An attacker who can influence the placeholder field when creating a Calendar instance can supply arbitrary html or javascript that will be rendered in the context of a user, leading to XSS.Recommendations
For versions 1.0.14 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾