Description

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.

Remediation

References

https://hackerone.com/reports/403692

Related Vulnerabilities

CVE-2020-7618 Vulnerability in npm package sds

CVE-2018-11695 Vulnerability in maven package org.webjars.npm:node-sass

CVE-2020-7771 Vulnerability in npm package asciitable.js

CVE-2022-24999 Vulnerability in maven package org.webjars:qs

CVE-2023-25572 Vulnerability in npm package react-admin

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Vendor Advisory