Paper/Archive/CVE-2022-1782

CVE-2022-1782

erudika erudika/para — Cross-site Scripting (XSS) - Generic in erudika/para

EPSS 1.0%CVSS 9.4

critical.is priorityof 100

41

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 62.2.622 × 2012.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Cross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.

Affected

ProductAffectedFixed inSource

erudika/paraunspecified – < v1.45.11v1.45.11CNA

Scores by source

@huntrdev (CNA)9.4CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References

refhuntr.dev/bounties/7555693f-94e4-4183-98cb-3497da6df028 refgithub.com/erudika/para/commit/9d844f31333475a0394dd14b901ea50674b281f8