A cross site scripting vulnerability in collective.dms.basecontent up to 1.6 allows remote attackers to initiate attacks via renderCell function in column.py. Upgrade to v1.7 to fix. Patch: 6c4d616fcc771822a14ebae5e23f3f6d96d134b
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2022-4495 | 14 Dec 202215:15 | – | nvd |
![]() | GHSA-R48C-4VFJ-H426 collective.dms.basecontent Cross-site Scripting vulnerability | 14 Dec 202215:30 | – | osv |
![]() | PYSEC-2022-42989 | 14 Dec 202215:15 | – | osv |
![]() | CVE-2022-4495 | 14 Dec 202215:15 | – | osv |
![]() | collective.dms.basecontent Cross-site Scripting vulnerability | 14 Dec 202215:30 | – | github |
![]() | Cross-Site Scripting (XSS) | 15 Dec 202202:04 | – | veracode |
![]() | CVE-2022-4495 collective.dms.basecontent column.py renderCell cross site scripting | 14 Dec 202200:00 | – | cvelist |
![]() | CVE-2022-4495 | 23 May 202500:31 | – | redhatcve |
![]() | Cross site scripting | 14 Dec 202215:15 | – | prion |
[
{
"vendor": "n/a",
"product": "collective.dms.basecontent",
"versions": [
{
"version": "1.0",
"status": "affected"
},
{
"version": "1.1",
"status": "affected"
},
{
"version": "1.2",
"status": "affected"
},
{
"version": "1.3",
"status": "affected"
},
{
"version": "1.4",
"status": "affected"
},
{
"version": "1.5",
"status": "affected"
},
{
"version": "1.6",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo