Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/01 12:15 p.m.8 views

CVE-2022-50942 Incinga Web 2.8.2 Client-Side Cross-Site Scripting via EventListener

Incinga Web 2.8.2 contains a client-side cross-site scripting vulnerability that allows remote attackers to inject malicious script codes through the icinga.min.js file. Attackers can exploit the EventListener.handleEvent method to execute arbitrary scripts, potentially leading to session hijacki...

4.8CVSS6.1AI score0.00256EPSS
SaveExploits0References6
Rows per page
Query Builder