CVE-2022-2511

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

Cross site scripting

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

CVE-2022-2511

The CVE-2022-2511 issue affects BlueSpice’s commonuserinterface component, enabling Cross-site Scripting (XSS) via the title parameter in the call URL. The vulnerability is a client-visible injection risk that can cause arbitrary HTML to be rendered in pages, as described in upstream advisories. ...

CVE-2022-2511: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

PT-2022-17081

Name of the Vulnerable Software and Affected Versions BlueSpice affected versions not specified Description The issue concerns a Cross-site Scripting XSS vulnerability in the commonuserinterface component. This allows an attacker to inject arbitrary HTML into a page using the title parameter of t...