CVE-2022-42100

CVE-2022-42100 affects KLiK SocialMediaWebsite version 1.0.1. The RedHat/EUVD/CNVD/etc. entries confirm a cross-site scripting (XSS) vulnerability in the reply-form where user-supplied data in the location input can be stored and rendered, due to insufficient input filtering/escaping. The issue i...

CVE-2022-42099

The CVE-2022-42099 entry concerns KLiK SocialMediaWebsite version 1.0.1 with stored XSS via the Forum Subject input. The root cause is an XSS vulnerability in the forum subject handling that allows injected script to be stored and later executed by other users. Impact is described as enabling sto...