Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
1 matching record.
-
A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object…
A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object (ctx) to execute arbitrary code with the privileges of the Node.js process. The…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Promzard&limit=100. RSS for this section: feed.xml.