github.com
https://github.com/francoisjacquet/rosariosis/commit/dcd3b86156bf9e981944e1a9e01ea23d8ad7c83a CVE-2022-3072
MEDIUM
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Record summary
CVE-2022-3072 has a selected CVSS score of 5.4 (medium).
Description
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
francoisjacquet/rosariosisBrowse francoisjacquet / francoisjacquet/rosariosis | CVE List | Before 8.9.3 | affected |
francoisjacquet/rosariosisBrowse Packagist / francoisjacquet/rosariosis | GitHub Advisory | Before 8.9.3 · Fixed in 8.9.3 | affected |
References
4gitlab.com
https://gitlab.com/francoisjacquet/rosariosis/blob/mobile/CHANGES.md huntr.devConfirmation
https://huntr.dev/bounties/9755ae6a-b08b-40a0-8089-c723b2d9ca52 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-3072