PT-2020-14474
CVE-2020-15517
·
Published
2020-07-07
·
Updated
2022-05-24
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ke search extension versions 2.8.2 and earlier
ke search extension versions 3.x through 3.1.3
Description
The issue allows for XSS.
Recommendations
For ke search extension versions 2.8.2 and earlier, update to a version later than 2.8.2.
For ke search extension versions 3.x through 3.1.3, update to a version later than 3.1.3.
Found an issue in the description? Have something to add? Feel free to write us 👾