CVE-2022-2510

Cross-site Scripting XSS vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML XSS on page "Special:SearchCenter", using the search term in the URL...

PT-2022-17077

Name of the Vulnerable Software and Affected Versions BlueSpice affected versions not specified Description A Cross-site Scripting XSS issue allows an attacker to inject arbitrary HTML on the "Special:SearchCenter" page, using the search term in the URL. This occurs in the...

CVE-2022-2510: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML XSS on page "Special:SearchCenter", using the search term in the URL...