Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08169
HistoryJan 16, 2022 - 12:00 a.m.

Caldera Cross-Site Scripting Vulnerability (CNVD-2022-08169)

2022-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
caldera
cross-site scripting
version 2.8.1
french company.

EPSS

0.001

Percentile

39.6%

A cross-site scripting vulnerability exists in version 2.8.1 of Caldera, a suite of software from the French company Caldera that provides color management, imaging and processing solutions for printer devices, which stems from a lack of effective filtering and escaping of user-submitted parameter data. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

39.6%

Related for CNVD-2022-08169