CVE-2019-12313

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element

published May 24, 2019

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01257 · 69.3th percentile
Published
2019-05-24T13:30Z
EPSS history
Timeline
  • 24 MAY 13:30Z
    XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element
    cvelistv5