Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS0zOG04LTVnZmMtNjYzZ84AA5c3

Enhavo Cross-site Scripting vulnerability

A cross-site scripting (XSS) vulnerability in the New/Edit Article module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Create Tag text field.

Permalink: https://github.com/advisories/GHSA-38m8-5gfc-663g
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zOG04LTVnZmMtNjYzZ84AA5c3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 2 months ago
Updated: 2 months ago


Identifiers: GHSA-38m8-5gfc-663g, CVE-2024-25874
References: Repository: https://github.com/dd3x3r/enhavo
Blast Radius: 1.0

Affected Packages

packagist:enhavo/enhavo-app
Dependent packages: 0
Dependent repositories: 0
Downloads: 211 total
Affected Version Ranges: <= 0.13.1
No known fixed version
All affected versions: