CVE-2023-2102
Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments
MEDIUM 4.8EPSS 0.5%
Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
- Affected
- alextselegidis · alextselegidis/easyappointments
- CVSS v3.1 NVD
- 4.8 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - CVSS v3.0 HUNTR
- 6.8 MEDIUM
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:H - EPSS
- 0.50% chance of exploitation in the next 30 days, 42nd percentile
- Published
- 2023-04-15
- Updated
- 2025-02-06
Proof-of-concept exploits (1)
Security advisories
- advisories/GHSA-j6qq-9939-9jv8
- alextselegidis/easyappointments/commit/bddc5cbeb7ff237a72943b304dcb01c653781767