CVE-2021-38138

OneNav beta 0.9.12 allows XSS via the Add Link feature

published August 5, 2021

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01503 · 74.1th percentile
Published
2021-08-05T15:59Z
EPSS history
Timeline
  • 05 AUG 15:59Z
    OneNav beta 0.9.12 allows XSS via the Add Link feature
    cvelistv5