Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:hashtopolis:hashtopolis:0.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.4.0"
},
{
"last_affected": "0.4.0"
}
],
"source": "CPE_STRING"
}
]
}