CVE-2022-29894

Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00767 · 55.0th percentile
Published
2022-06-13T04:50Z
EPSS history
Timeline
  • 13 JUN 04:50Z
    Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function
    cvelistv5