github.com
https://github.com/francoisjacquet/rosariosis CVE-2022-1997
MEDIUM
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
Record summary
CVE-2022-1997 has a selected CVSS score of 5.4 (medium).
Description
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.
Description source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
francoisjacquet/rosariosisBrowse francoisjacquet / francoisjacquet/rosariosis | CVE List | Before 9.0 | affected |
francoisjacquet/rosariosisBrowse Packagist / francoisjacquet/rosariosis | GitHub Advisory | Before 9.0 · Fixed in 9.0 | affected |
References
4github.com
https://github.com/francoisjacquet/rosariosis/commit/6b22c0b5b40fad891c8cf9e7eeff3e42a35c0bf8 huntr.devConfirmation
https://huntr.dev/bounties/28861ae9-7b09-45b7-a003-eccf903db71d nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-1997