Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-1811

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3hwx-c6cp-q972

Publify vulnerable to cross site scripting Unrestricted file upload allowed the attacker to manipulate the request and bypass the protection of HTML files using a text file. Stored XSS may be obtained.

gitlab/gem/publify_core/CVE-2022-1811

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9.