CVE-2022-23367

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting XSS vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection...

CVE-2022-23367

CVE-2022-23367 affects Fulusso v1.1. The vulnerability is a DOM-based cross-site scripting (XSS) in the file path /BindAccount/SuccessTips.js, arising from how open redirection is handled. This allows an attacker to inject malicious code into a victim user’s device via an open redirect mechanism....