Lucene search
HistoryOct 07, 2022 - 7:15 p.m.
CVE-2022-41392
cve-2022-41392
totaljs
main settings
web scripts
html
crafted payload
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.8%
A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website name text field under Main Settings.
Affected configurations
Node
totaljstotal.jsMatch2022-08-20node.js
Related
prion
prion
Cross site scripting
2022-10-07 19:15:00
cvelist
cvelist
CVE-2022-41392
2022-10-07 00:00:00
cve
cve
CVE-2022-41392
2022-10-07 19:15:13
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.8%
Related for NVD:CVE-2022-41392