CVE-2022-3442

Crealogix EBICS 7.0 contains a Cross-Site Scripting vulnerability in the /ebics-server/ebics.aspx component. The issue stems from insufficient input handling (lack of proper filtering/escaping) of user-supplied data, enabling remote exploitation. Public exploitation is noted in the CVE context; u...