CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool [Show Current Template Info] current-template-name allows Stored XSS.This issue affects TempTool [Show Current Template Info]: from n/a through <= 1.3.1.
Explanation of Vulnerability in Simple Terms
TempTool versions 1.3.1 and earlier contain a cross-site scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into the application. An authenticated user must visit a crafted page or link for the attack to succeed. The vulnerability can affect other users and compromise site integrity, though the impact is limited to low-severity data exposure.
What an attacker can do
Inject malicious scripts that execute in other users' browsers when they visit affected pages.
Potential impact on your site
Authenticated attackers can steal session data or modify site content seen by other users.
Conditions required to exploit
Attacker must have low-level authentication; victim must click a malicious link or visit a crafted page.
Key dates
External resources
