CVE-2022-3895

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

Score

CVSS 3.1 6.1 Medium

Status

Modified - security@bluespice.com

Published

2022-11-15

Last modified

2025-04-29

Weaknesses

CWE-79

Affected products

• Common User Interface Component (Hallo Welt Gmbh)
• Bluespice (Hallowelt)
• Common User Interface (Hallowelt)

References

• https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08