github.com/zincsearch/zincsearch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.4

CVE-2022-32171

Zinc - Stored XSS

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete user functionality. When an authenticated user deletes a user having a XSS payload in the user id field, the javascript payload will be executed and al…

zinc zinc github.com/zinclabs/zinc github.com/zincsearch/zincsearch Go

Oct 6, 2022
Medium 5.4

CVE-2022-32172

Zinc - Cross-Site Scripting

In Zinc, versions v0.1.9 through v0.3.1 are vulnerable to Stored Cross-Site Scripting when using the delete template functionality. When an authenticated user deletes a template with a XSS payload in the name field, the Javascript payload will be executed and…

zinc zinc github.com/zinclabs/zinc github.com/zincsearch/zincsearch Go

Oct 6, 2022