github.com
https://github.com/francoisjacquet/rosariosis CVE-2022-2036
MEDIUM
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Record summary
CVE-2022-2036 has a selected CVSS score of 5.4 (medium).
Description
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
francoisjacquet/rosariosisBrowse francoisjacquet / francoisjacquet/rosariosis | CVE List | Before 9.0.1 | affected |
francoisjacquet/rosariosisBrowse Packagist / francoisjacquet/rosariosis | GitHub Advisory | Before 9.1 · Fixed in 9.1 | affected |
References
4github.com
https://github.com/francoisjacquet/rosariosis/commit/6e213b17e6ac3a3961e1eabcdaba1c892844398a huntr.devConfirmation
https://huntr.dev/bounties/c7715149-f99c-4d62-a5c6-c78bfdb41905 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-2036