CVE-2022-23391

2022-02-1421:15:09

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Search box.

CPENameOperatorVersion
pybbseqpybbs2.5
pybbseqjfinalbbs2.1
pybbseqpybbs-4.0-beta
pybbseqpybbs2.6
pybbseqpybbs2.5-lastest
pybbseq6.0.0
pybbseq5.2.0
pybbseqjfinalbbs2.0
pybbseq5.1.0
pybbseqpybbs4.0-release

Name	Operator	Version
pybbs	eq	pybbs2.5
pybbs	eq	jfinalbbs2.1
pybbs	eq	pybbs-4.0-beta
pybbs	eq	pybbs2.6
pybbs	eq	pybbs2.5-lastest
pybbs	eq	6.0.0
pybbs	eq	5.2.0
pybbs	eq	jfinalbbs2.0
pybbs	eq	5.1.0
pybbs	eq	pybbs4.0-release

Rows per page:

1-10 of 131

References

github.com/tomoya92/pybbs/issues/171