CVE-2022-3893

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...

CVE-2022-3893

CVE-2022-3893 is a cross-site scripting (XSS) vulnerability in the BlueSpiceCustomMenu extension for BlueSpice. The affected component is the custom menu navigation, exploitable by a user with admin permissions to inject arbitrary HTML. According to the provided sources, this can lead to user-lev...

CVE-2022-3893 Potential XSS on custom menu navigation

Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...