Threats tagged 'ghsa-mq3c-h3gr-228f'

A cross-site scripting (XSS) vulnerability exists in the addlist.php file of the Add Product Page component in configuroweb inventariobasico. The vulnerability arises from improper handling of the product name argument, allowing remote attackers to inject malicious scripts. The product uses a rolling release model, so no specific affected or fixed versions are identified. The vulnerability has a low CVSS score of 3.5 and public exploit code is available. The project has been notified but has not yet responded or issued a fix.