GHSA-5chx-gg25-v37mMediumCVSS 6.1

Cross-site Scripting in xain

Published
April 12, 2022
Last Modified
January 11, 2023

🔗 CVE IDs covered (1)

CVE-2018-20302 →

📋 Description

XSS is possible via the use of the order query parameter. An example request would look like:

http://host/ressources?order=%27><script>alert(1);</script>

🎯 Affected products1

  • erlang/xain:< 0.6.2

🔗 References (4)