← back
CVE-2022-1825

Cross-site Scripting (XSS) - Reflected in collectiveaccess/providence

CVSS 5.5 MEDIUMEPSS 0.6%CWE-79
Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected products
collectiveaccess · collectiveaccess/providence

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/collectiveaccess/providence/commit/49de453c8d4942d09fab230e8f242300c831e2a7https://huntr.dev/bounties/c6ad4cef-1b3d-472f-af0e-68e46341dfe5