CVE-2022-3877

LOW

Click Studios Passwordstate - Cross-Site Scripting in URL Field Handler

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected is an unknown function of the component URL Field Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-216246 is the identifier assigned to this vulnerability.

References (3)

Core 3
Core References
Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.216246

Scores

CVSS v3 3.5
EPSS 0.0064
EPSS Percentile 45.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-707
Status published
Products (1)
clickstudios/passwordstate (2 CPE variants)
Published Dec 19, 2022
Tracked Since Feb 18, 2026