CVE-2022-2510

The CVE-2022-2510 issue concerns BlueSpice (Hallo Welt! GmbH) with the Extension:ExtendedSearch feature, where an XSS vulnerability allows an attacker to inject arbitrary HTML on the Special:SearchCenter page via a URL search term. The vulnerability affects the search functionality within BlueSpi...

CVE-2022-2511 Potential XSS in title URL parameter

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

CVE-2022-2511

The CVE-2022-2511 issue affects BlueSpice’s commonuserinterface component, enabling Cross-site Scripting (XSS) via the title parameter in the call URL. The vulnerability is a client-visible injection risk that can cause arbitrary HTML to be rendered in pages, as described in upstream advisories. ...

PT-2022-17077

Name of the Vulnerable Software and Affected Versions BlueSpice affected versions not specified Description A Cross-site Scripting XSS issue allows an attacker to inject arbitrary HTML on the "Special:SearchCenter" page, using the search term in the URL. This occurs in the...

CVE-2022-2510: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML XSS on page "Special:SearchCenter", using the search term in the URL...

CVE-2022-2511: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in BlueSpice version 4.x and the 3.x series of versions, which originates from a user being able to inject arbitrary HTML XSS on Special:SearchCenter using search terms...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in the BlueSpice 4.x series of releases, which stems from a commonuserinterface component that allows an attacker to inject arbitrary HTML into a page using the title parameter of the...

PT-2022-17081

Name of the Vulnerable Software and Affected Versions BlueSpice affected versions not specified Description The issue concerns a Cross-site Scripting XSS vulnerability in the commonuserinterface component. This allows an attacker to inject arbitrary HTML into a page using the title parameter of t...

CVE-2022-2511

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

CVE-2022-2510

Cross-site Scripting XSS vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML XSS on page "Special:SearchCenter", using the search term in the URL...