Description
Cipi 3.1.15 allows Add Server stored XSS via the /api/servers name field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | andreapollastri/cipi | <= 3.1.15 | — | GHSA-vpmw-77vm-4mjg |
Medium · 5.4
CVE-2022-26332
EUVD-2022-1548GHSA-vpmw-77vm-4mjg
Cross-site Scripting in Cipi
Published Mar 1, 2022 · Updated Aug 3, 2024 · Assigned by mitre