CVE-2022-42000

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...

CVE-2022-42000

CVE-2022-42000 describes a Cross-site Scripting (XSS) vulnerability in the BlueSpiceSocialProfile extension of BlueSpice. A user with comment permissions can inject arbitrary HTML into the comment section of a wiki page, with the impact described as low confidentiality and integrity (availability...

CVE-2022-42000 Potential XSS in comment section

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...