PT-2024-22729 · Jan Peter Lambeck & 3Uu · Shariff Wrapper
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Shariff Wrapper versions n/a through 4.6.10
Description
The issue affects Jan-Peter Lambeck & 3UU Shariff Wrapper, allowing Stored XSS due to improper neutralization of input during web page generation. This is a Cross-site Scripting vulnerability.
Recommendations
For Shariff Wrapper versions n/a through 4.6.10, update to a version later than 4.6.10 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Shariff Wrapper