CVE-2022-48612

n/a / n/a PUBLISHED

Description (CNA)

A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression (validating whether a URL is controlled by ClassLink) is not present in all applicable places.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://blog.zerdle.net/classlink/

ADP enrichment

CVE

No English description supplied.

https://blog.zerdle.net/classlink/

CISA-ADP

No English description supplied.

No references supplied.