EUVD-2022-0362

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Weblate versions before 4.11 allow cross-site scripting via user input. Upgrade recommended for users.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2022-24710	4 Mar 202200:43	–	circl
CNNVD	Weblate 跨站脚本漏洞	25 Feb 202200:00	–	cnnvd
CNVD	Weblate Cross-Site Scripting Vulnerability	1 Mar 202200:00	–	cnvd
CVE	CVE-2022-24710	25 Feb 202220:50	–	cve
Cvelist	CVE-2022-24710 Cross-site Scripting in Weblate	25 Feb 202220:50	–	cvelist
Github Security Blog	Cross-site Scripting in Weblate	25 Feb 202222:18	–	github
NVD	CVE-2022-24710	25 Feb 202221:15	–	nvd
OSV	BIT-WEBLATE-2022-24710	6 Mar 202411:08	–	osv
OSV	CVE-2022-24710 Cross-site Scripting in Weblate	25 Feb 202220:50	–	osv
OSV	GHSA-6JP6-9RF9-GC66 Cross-site Scripting in Weblate	25 Feb 202222:18	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "1adc9709-1d11-359d-a3de-1f5f27986a84",
        "vendor": {
          "name": "WeblateOrg"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c6e04b8a-9790-3781-93f2-5b5ac11a33a6",
        "product": {
          "name": "weblate"
        },
        "product_version": "< 4.11"
      }
    ]
  }
]

Source	Link
github	www.github.com/WeblateOrg/weblate/security/advisories/GHSA-6jp6-9rf9-gc66
github	www.github.com/WeblateOrg/weblate/commit/f6753a1a1c63fade6ad418fbda827c6750ab0bda
github	www.github.com/WeblateOrg/weblate/commit/9e19a8414337692cc90da2a91c9af5420f2952f1
github	www.github.com/WeblateOrg/weblate/commit/22d577b1f1e88665a88b4569380148030e0f8389
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24710
github	www.github.com/pypa/advisory-database/tree/main/vulns/weblate/PYSEC-2022-35.yaml
suse	www.suse.com/security/cve/CVE-2022-24710.html

03 Oct 2025 20:07Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.4

CVSS 23.5

EPSS0.00311