EUVD-2022-44802

Malicious code in bioql PyPI...

CVE-2022-41789

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage...

CVE-2022-41611

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application...

CVE-2022-41789 Potential XSS on default page header

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage...

CVE-2022-41789

CVE-2022-41789 describes a Cross-site Scripting (XSS) vulnerability in the BlueSpiceDiscovery skin of BlueSpice. A logged-in user with edit permissions can inject arbitrary HTML into the default page header of a wiki page. CVSSv3.1 vectors in the entry show a base score of 5.4 (MEDIUM) with Netwo...

CVE-2022-41789 Potential XSS on default page header

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage...

CVE-2022-41611 Potential XSS on sidebar navigation

Cross-site Scripting XSS vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application...

CVE-2022-41611

BlueSpice CVE-2022-41611 affects the BlueSpiceDiscovery skin. An XSS flaw allows a user with admin privileges to inject arbitrary HTML into the main navigation of the application. The issue is centered on the skin’s rendering logic (BlueSpiceDiscovery) and is not described as fixed in the provide...