Lucene search
HistoryOct 07, 2022 - 7:15 p.m.
CVE-2022-41392
xss
vulnerability
totaljs
web scripts
html
main settings
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
26.0%
A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website name text field under Main Settings.
Affected configurations
Node
totaljstotal.jsMatch2022-08-20node.js
| CPE | Name | Operator | Version |
|---|---|---|---|
| totaljs:total.js | totaljs total.js | eq | 2022-08-20 |
References
Social References
More
Related
nvd
nvd
CVE-2022-41392
2022-10-07 19:15:13
prion
prion
Cross site scripting
2022-10-07 19:15:00
cvelist
cvelist
CVE-2022-41392
2022-10-07 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
26.0%
Related for CVE-2022-41392