CVE-2022-36859

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices.

Score

CVSS 3.1 5.7 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-09-09

Last modified

2024-08-03

Weaknesses

CWE-20, CWE-79

Affected products

• Smarttagplugin (Samsung)
• Smarttagplugin (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09