Lucene search
Veracode Vulnerability DatabaseVERACODE:38484HistoryDec 15, 2022 - 2:04 a.m.
Cross-Site Scripting (XSS)
2022-12-1502:04:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
collective.dms.basecontent
rendercell
column.py
missing escape characters
malicious javascript
vulnerability
attacker
execute
0.001 Low
EPSS
Percentile
37.6%
collective.dms.basecontent is vulnerable to cross-site scripting. The vulnerability exists in the renderCell function of column.py due to missing escape characters which allows an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| collective.dms.basecontent | le | 1.6 | |
| collective.dms.basecontent | le | 0.6 | |
| collective.dms.basecontent | le | 1.6 | |
| collective.dms.basecontent | le | 0.6 |
Related
nvd
nvd
CVE-2022-4495
2022-12-14 15:15:10
prion
prion
Cross site scripting
2022-12-14 15:15:00
osv
osv
CVE-2022-4495
2022-12-14 15:15:10
PYSEC-2022-42989
2022-12-14 15:15:00
collective.dms.basecontent Cross-site Scripting vulnerability
2022-12-14 15:30:16
cvelist
cvelist
github
github
collective.dms.basecontent Cross-site Scripting vulnerability
2022-12-14 15:30:16
cve
cve
CVE-2022-4495
2022-12-14 15:15:10