CVE-2022-3893

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...

CVE-2022-3893

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...

Cross site scripting

Cross-site Scripting XSS vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks...

Cross site scripting

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application...

Cross site scripting

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...

Cross site scripting

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage...

CVE-2022-41789

CVE-2022-41789 describes a Cross-site Scripting (XSS) vulnerability in the BlueSpiceDiscovery skin of BlueSpice. A logged-in user with edit permissions can inject arbitrary HTML into the default page header of a wiki page. CVSSv3.1 vectors in the entry show a base score of 5.4 (MEDIUM) with Netwo...

CVE-2022-42001 Potential XSS in book navigation

Cross-site Scripting XSS vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation...

CVE-2022-42001

CVE-2022-42001 describes a cross-site scripting (XSS) vulnerability in the BlueSpiceBookshelf extension of BlueSpice. The issue allows a user with a regular account and edit permissions to inject arbitrary HTML into the book navigation. The vulnerability is tied to the BlueSpiceBookshelf componen...

CVE-2022-41611 Potential XSS on sidebar navigation

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application...

CVE-2022-3958

The CVE-2022-3958 entry concerns a Cross-site Scripting (XSS) flaw in the BlueSpiceUserSidebar extension for BlueSpice. The vulnerability allows a user with a regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users, enabling tar...

CVE-2022-3893 Potential XSS on custom menu navigation

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...

CVE-2022-3893

CVE-2022-3893 is a cross-site scripting (XSS) vulnerability in the BlueSpiceCustomMenu extension for BlueSpice. The affected component is the custom menu navigation, exploitable by a user with admin permissions to inject arbitrary HTML. According to the provided sources, this can lead to user-lev...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. BlueSpice suffers from a cross-site scripting vulnerability that stems from its BlueSpiceCustomMenu extension that allows users with administrative privileges to inject arbitrary HTML into the application's custom menu...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A cross-site scripting vulnerability exists in BlueSpice versions prior to 4.2.1 that stems from the presence of cross-site scripting XSS, which allows users with administrator privileges to inject arbitrary HTML into t...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A cross-site scripting vulnerability exists in BlueSpice versions prior to 4.2.1, which stems from the presence of cross-site scripting XSS that allows a logged-in user with editing privileges to inject arbitrary HTML...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A cross-site scripting vulnerability exists in BlueSpice versions prior to 4.2.1 that stems from the presence of cross-site scripting XSS, which allows users with regular account and edit privileges to inject arbitrary...

PT-2022-26084 · Unknown +1 · Bluespicefoundation +1

Name of the Vulnerable Software and Affected Versions: BlueSpice affected versions not specified Description: The issue allows a user with a regular account and edit permissions to inject arbitrary HTML into the history view of a wikipage, which is a result of a Cross-site Scripting XSS...

CVE-2022-3958: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks...

PT-2022-26205 · Unknown +1 · Bluespicesocialprofile +1

Name of the Vulnerable Software and Affected Versions: BlueSpice affected versions not specified Description: The issue allows a user with comment permissions to inject arbitrary HTML into the comment section of a wikipage, which can lead to Cross-site Scripting XSS. This occurs in the...