Cross site scripting

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

CVE-2022-22115

In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim...

CVE-2022-22115 Teedy - Stored Cross-Site Scripting (XSS) in Tag Name

In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim...

CVE-2022-22115 Teedy - Stored Cross-Site Scripting (XSS) in Tag Name

In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim...

CVE-2022-22115

The CVE-2022-22115 entry concerns Teedy (open-source document management). The vulnerability is a Stored XSS flaw in the name of a created Tag, caused by improper sanitization on the Edit Tag page. A low-privileged attacker can store malicious scripts in a Tag name, with potential impact to a hig...

CVE-2022-22114 Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

CVE-2022-22114

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

CVE-2022-22114

The CVE refers to Teedy, versions 1.5–1.9, with a Reflected Cross-Site Scripting (XSS) flaw in the search term display. The issue arises from insufficient sanitization/output of search results, enabling an attacker to craft a URL that injects scripts executed in the victim’s browser. In the descr...

CVE-2022-22114 Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

Teedy 跨站脚本漏洞

Teedy is a French open source, lightweight document management system for individuals and businesses. Teedy suffers from a cross-site scripting vulnerability in versions v1.5 through v1.9 that stems from a lack of checksum filtering of user-supplied data and output. An attacker can exploit this...

PT-2022-15251

Name of the Vulnerable Software and Affected Versions Teedy versions v1.5 through v1.9 Description The issue concerns Reflected Cross-Site Scripting XSS in the "search term" search functionality, which is not sufficiently sanitized, allowing the injection of arbitrary scripts. These scripts are...

Teedy 跨站脚本漏洞

Teedy is a French open source, lightweight document management system for individuals and businesses. Teedy suffers from a cross-site scripting vulnerability that stems from the fact that in Teedy, versions v1.5 through v1.9 are susceptible to attacks that store cross-site scripting XSS in the na...

PT-2022-15252

Name of the Vulnerable Software and Affected Versions Teedy versions v1.5 through v1.9 Description The issue is related to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store...

CVE-2022-22115: Improper Neutralization of Input During Web Page Generation

In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim...

CVE-2022-22114: Improper Neutralization of Input During Web Page Generation

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

CVE-2022-22114

In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting XSS. The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. These scripts are executed in a victim’s...

CVE-2022-22115

In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting XSS in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name of the Tag. In the worst case, the victim...