CVE-2022-2510 Potential XSS on Special:SearchCenter

Cross-site Scripting XSS vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML XSS on page "Special:SearchCenter", using the search term in the URL...

CVE-2022-2510

The CVE-2022-2510 issue concerns BlueSpice (Hallo Welt! GmbH) with the Extension:ExtendedSearch feature, where an XSS vulnerability allows an attacker to inject arbitrary HTML on the Special:SearchCenter page via a URL search term. The vulnerability affects the search functionality within BlueSpi...