CVE-2022-23367

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-02-14

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Fulusso (Fulusso Project)

References

• https://gist.github.com/bincat99/311aff295c270371dc8ee89599b016f1