CVE-2022-40034: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter...

CVE-2022-40034

Cross-Site Scripting XSS vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter...

Rawchen blog-ssm 跨站脚本漏洞

blog-ssm is a JavaWeb-based blog project by the individual developer Rawchen in China. A security vulnerability exists in Rawchen blog-ssm v1.0, which stems from a cross-site scripting XSS vulnerability that can be exploited by an attacker to execute arbitrary code via the notifyInfo parameter...

CVE-2022-40034

CVE-2022-40034 is an XSS vulnerability affecting Rawchen blog-ssm v1.0. The issue allows an attacker to execute arbitrary code via the notifyInfo parameter. Public sources consistently describe the vulnerability as XSS in Rawchen blog-ssm v1.0; the root cause is indicated as improper handling of ...