GHSA-5m62-rjgx-pxp6
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 8, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.