CVE-2022-4585

Opencaching Deutschland oc-server3’s Cookie Handler contains a cross-site scripting (XSS) flaw in an unknown part of htdocs/templates2/ocstyle/start.tpl triggered by manipulating the usercountryCode parameter. The issue is exploitable remotely. A patch is available: c720f2777a452186c67ef30db3679d...