CVE-2022-4638

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

CVE-2022-4638 collective.contact.widget widgets.py title cross site scripting

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

CVE-2022-4638

CVE-2022-4638 affects the Collective project’s add‑on collective.contact.widget (up to v1.12). The vulnerability resides in the title function of src/collective/contact/widget/widgets.py and enables cross‑site scripting (XSS). It can be triggered remotely. The patch referenced to fix this issue i...