CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-12-19

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Softr (Softr)

References

• https://isaghojaria.medium.com/softr-v2-0-was-discovered-to-be-vulnerable-to-html-injection-via-the-name-field-of-the-a…
• https://www.softr.io/