CVE-2022-1825

CVE-2022-1825: Reflected XSS in Providence (CollectiveAccess) before version 1.8. Exploitation occurs via reflected user input; impact is limited to confidentiality/integrity with MEDIUM severity (CVSS 3.1: 5.4). No explicit exploit details provided in the supplied documents. Affected product is ...

CVE-2013-4507

CVE-2013-4507 affects CollectiveAccess Providence and Pawtucket up to version 1.3.0. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause is a reflected/stored XSS issue in the web interf...