Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-74j9-xhqr-6qv3: Reflected Cross Site Scripting (XSS) in error message

If a website has been set to the “dev” environment mode, a URL can be provided which includes an XSS payload which will be executed in the resulting error message.

ghsa
#xss#web#git

Reflected Cross Site Scripting (XSS) in error message

Low severity GitHub Reviewed Published Jan 23, 2025 to the GitHub Advisory Database • Updated Jan 23, 2025

ghsa: Latest News

GHSA-9qrm-48qf-r2rw: Directus has a DOM-Based cross-site scripting (XSS) via layout_options