CVE-2022-3245
Code Injection in display of tag title on saving tags in microweber/microweber
Résumé
Code Injection in display of tag title on saving tags in microweber/microweber
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev