CVE-2015-8310 Cherry Music Cross-site Scripting (XSS) vulnerability
MediumCVSS 5.4
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi cherrymusic(PyPI) | < 0.36.0 | 0.36.0 |
| pypi cherrymusic(PyPI) | = 0.30.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.31.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.31.1 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.31.2 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.32.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.33.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.34.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.34.1 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.35.1 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.35.2 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.35.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.27.2 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.27.1 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.27.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.26.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.25.2 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.25.1 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.25.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.24.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.23.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.22.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.21.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.20.0 | No fix listed |
| pypi cherrymusic(PyPI) | = 0.11.0 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| fomori cherrymusic | <= 0.35.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking third-party-advisory
- github.com patch third-party-advisory
- github.com product
- github.com
- web.archive.org
- www.fomori.org release-notes vendor-advisory
- 97148 vdb-entry
- github.com vendor-advisory