← CVE Intelligence

CVE-2022-3958

Potential XSS on personal menu navigation PUBLISHED

Description (CNA)

Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks.

Affected (CNA)

Vendor / productVersions
Hallo Welt! GmbH / BlueSpiceaffected 4 before 4.2.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.