Threats tagged 'ghsa-g77q-hxjf-7mcc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-72570cube-root/directory-serve · Stored Cross-site Scripting (XSS) Vulnerability Medium5.4EPSS 0.2%2026-08-10GCVE DatabaseCVE-2026-72570 A stored cross-site scripting (XSS) vulnerability exists in cube-root/directory-serve through version 1.3.7. This flaw allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a specially crafted filename containing HTML attribute-breaking characters. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity. No official patch or remediation information is currently provided. EPSS 0.2%Report on CVE-2026-72570 Vulnerability CWE-79 #ghsa-g77q-hxjf-7mcc	GCVE Database	2026-08-10

Page 1 of 1