CVE-2022-4587

Summary of CVE-2022-4587 (Opencaching Deutschland oc-server3) Affected software: Opencaching Deutschland oc-server3, specifically the Login Page component (htdocs/templates2/ocstyle/login.tpl). Vulnerability: Cross-site scripting (XSS) via manipulation of the argument username. The issue may be t...

CVE-2022-4586

Opencaching Deutschland oc-server3 contains a cross-site scripting vulnerability in the Cachelist Handler, specifically in htdocs/templates2/ocstyle/cachelists.tpl. Manipulation of the name_filter/by_filter arguments enables remote execution of scripts. The CVE entry notes that the attack can be ...