Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-77875
HistoryMay 13, 2022 - 12:00 a.m.

Survey Sparrow Enterprise Survey Software Cross-Site Scripting Vulnerability (CNVD-2022-77875)

2022-05-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

33.5%

A cross-site scripting vulnerability exists in Survey Sparrow Enterprise Survey Software version 2022, which originates in the test parameter The vulnerability is caused by a lack of data validation filtering of user-supplied data and output. An attacker could use this vulnerability to execute JavaScript code on the client side.

0.001 Low

EPSS

Percentile

33.5%

Related for CNVD-2022-77875