CVE-2022-40034

Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-01-23

Last modified

2025-04-03

Weaknesses

CWE-79

Affected products

• Javaweb Blog (Javaweb Blog Project)

References

• https://github.com/rawchen/blog-ssm/issues/4