Cross site scripting

2022-07-2216:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

JSON

Cross-site Scripting (XSS) vulnerability in “Extension:ExtendedSearch” of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page “Special:SearchCenter”, using the search term in the URL.

CPENameOperatorVersion
bluespiceeq4.1.0 rc2
bluespiceeq4.1.0
bluespicege3.0
bluespicelt3.2.9

Name	Operator	Version
bluespice	eq	4.1.0 rc2
bluespice	eq	4.1.0
bluespice	ge	3.0
bluespice	lt	3.2.9

References

en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-01

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for PRION:CVE-2022-2510