CVE-2022-3895

The CVE-2022-3895 entry describes a cross-site scripting (XSS) vulnerability in the Common UI Component: some UI elements do not properly sanitize output, enabling arbitrary HTML. Affected software is the Common User Interface Component (BlueSpice context implied by related records); root cause i...