Cross site scripting in francoisjacquet/rosariosis

MEDIO 5.4CVE-2022-2036 · GHSA-4hpr-hh77-6q9p · Published 09/06/2022 · updated 17/06/2026

In breve

CVE-2022-2036 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda francoisjacquet/rosariosis, rosariosis (rosariosis).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.90%, superiore al 59.8% delle vulnerabilità.
Correzione: aggiornare a 9.1, 9.0.1 o successiva.

Package	Affected versions	Patched versions
francoisjacquet/rosariosis Packagist	`< 9.1`	`9.1`
rosariosis rosariosis	`< 9.0.1`	`9.0.1`

Description

A Cross-site Scripting (XSS) vulnerability exists in in GitHub repository francoisjacquet/rosariosis prior to 9.1. HTML entities are not properly decoded from the URL.

NVD description

Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.

References

nvd.nist.gov/vuln/detail/CVE-2022-2036 · ADVISORY
francoisjacquet/rosariosis commit 6e213b1 · WEB
francoisjacquet/rosariosis · PACKAGE
huntr.dev/bounties/c7715149-f99c-4d62-a5c6-c78bfdb41905 · WEB

Altre vulnerabilità di francoisjacquet/rosariosis

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

francoisjacquet/rosariosis

Packagist

< 9.1

9.1

rosariosis

< 9.0.1

9.0.1

Altre vulnerabilità di francoisjacquet/rosariosis

Vedi tutto →