CVE-2022-29598

Solutions Atlantic Regulatory Reporting System RRS v500 is vulnerable to an reflected Cross-Site Scripting XSS vulnerability via RRSWeb/maint/ShowDocument/ShowDocument.aspx...

CVE-2022-29598

Solutions Atlantic Regulatory Reporting System (RRS) v500 is affected by a reflected Cross‑Site Scripting (XSS) vulnerability in RRSWeb/maint/ShowDocument/ShowDocument.aspx. The issue arises from the fileName parameter being reflected into a JavaScript context, enabling injection of arbitrary scr...