CVE-2022-34965

CVE-2022-34965 affects OpenTeknik OSSN Open Source Social Network v6.3 LTS. Affected component: /ossn/administrator/com_installer, where an arbitrary file upload allows execution of crafted PHP files. Privilege requirements: authenticated admin user; attack vector appears via web-exposed upload p...

CVE-2022-34962

OpenTeknik OSSN Open Source Social Network v6.3 LTS is affected by a stored XSS in the Group Timeline module. The vulnerability allows malicious input to be stored and rendered, potentially affecting authenticated users. CVE-2022-34962 has a CVSS 3.1 base score of 5.4 (Network attack vector, Low ...

CVE-2022-34963

The CVE-2022-34963 entry describes a stored cross-site scripting (XSS) vulnerability in Open Source Social Network (OSSN) v6.3 LTS, exposed via the News Feed module. The affected software is OSSN 6.3 LTS; root cause details are not explicitly provided beyond the stored XSS in News Feed. Exploit s...

CVE-2022-34966

Open Source Social Network (OSSN) v6.3 LTS contains an HTML injection漏洞 exposed via the location parameter at /ossn/home. The issue is documented across multiple sources as an HTML injection/vector that could lead to client-side impacts; no explicit exploitation details or patch/version fixes are...

CVE-2022-34961

CVE-2022-34961 affects OpenTechnik/Open Source Social Network (OSSN) v6.3 LTS. The vulnerability is a stored XSS in the Users Timeline module. The NVD metrics show CVSS v3.1 base score 5.4 (AV:N, AC:L, PR:L, UI:R, S:C, C:L, I:L, A:N). No exploitation status is provided in the documents. Connected...

CVE-2022-34964

The CVE-2022-34964 entry corresponds to a stored cross-site scripting (XSS) vulnerability in Open Source Social Network (OSSN) v6.3 LTS, exploitable via the SitePages module. Affected component: OSSN SitePages. Root cause: stored XSS, as described across multiple sources. Impact details from the ...