CVE-2022-35554

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-08-19

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Smartvista (Bpcbt)

References

• https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/reflected-xss-in-smartvista-cardgen-version-3.28.0-cve-2022…