← back
CVE-2019-20008

CVE-2019-20008

EPSS 0.8%
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/archerysec/archerysec/compare/archerysec-v1.2...v1.3https://github.com/archerysec/archerysec/issues/338https://github.com/archerysec/archerysec/releases/tag/v1.3