CVE-2022-4347 — xiandafu beetl-bbs WebUtils.java cross site scripting

Description (CNA)

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215107.

Affected (CNA)

Vendor / product	Versions
xiandafu / beetl-bbs	affected n/a

CWE

CWE-707

References

https://gitee.com/xiandafu/beetl-bbs/issues/I5XD5O
https://vuldb.com/?id.215107

ADP enrichment

CVE

No English description supplied.

https://gitee.com/xiandafu/beetl-bbs/issues/I5XD5O
https://vuldb.com/?id.215107

CISA-ADP

No English description supplied.

No references supplied.