Cross site scripting

Cross-site Scripting XSS vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks...

CVE-2022-3958

The CVE-2022-3958 entry concerns a Cross-site Scripting (XSS) flaw in the BlueSpiceUserSidebar extension for BlueSpice. The vulnerability allows a user with a regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users, enabling tar...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. BlueSpice suffers from a cross-site scripting vulnerability that stems from its BlueSpiceUserSidebar extension that allows users with regular account and edit privileges to inject arbitrary HTML into their own and other...