CVE-2022-40365

CVE-2022-40365 concerns the gocron project (versions up to and including 1.5.3). The vulnerability is a cross-site scripting (XSS) issue caused by lack of sanitization of the scope.row.hostname parameter in web/vue/src/pages/taskLog/list.vue, enabling an attacker to inject and potentially execute...