Back to feed
EUVD-2005-0001 · Published May 1, 2022
Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
Technologies
Edgewall_Software TracTrac Trac
Weaknesses
NVD-CWE-OtherCWE-79
CVSS scores
- v3.16.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
