CVE-2022-28586

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-04-25

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Hoosk (Hoosk)

References

• https://github.com/havok89/Hoosk/issues/63