Lucene search

K
cvelistMitreCVELIST:CVE-2022-48612
HistoryOct 16, 2023 - 12:00 a.m.

CVE-2022-48612

2023-10-1600:00:00
mitre
www.cve.org
universal cross site scripting
remote attackers
javascript injection
regular expression
url validation

0.001 Low

EPSS

Percentile

27.8%

A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression (validating whether a URL is controlled by ClassLink) is not present in all applicable places.

0.001 Low

EPSS

Percentile

27.8%

Related for CVELIST:CVE-2022-48612