Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: recipes unspecified Clear all filters
TI-2022-07245 CVE-2022-23074 · GHSA-f78f-957j-7jxh

Recipes - Stored XSS in Name Parameter

Priority LOW 18

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Keyword, Food and Unit components.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00852 Published 2022-06-21 No fix listed CWE-79
TI-2022-07244 CVE-2022-23073 · GHSA-67q5-2qcj-6mph

Recipes - Stored XSS in Clipboard

Priority LOW 18

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in copy to clipboard functionality.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00852 Published 2022-06-21 No fix listed CWE-79
TI-2022-07243 CVE-2022-23072 · GHSA-jwqf-wr86-3pxv

Recipes - Stored XSS in Add to Cart

Priority LOW 18

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in “Add to Cart” functionality.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00852 Published 2022-06-21 No fix listed CWE-79