CVE-2022-42001

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

Score

CVSS 3.1 5.4 Medium

Status

Modified - security@bluespice.com

Published

2022-11-15

Last modified

2025-04-29

Weaknesses

CWE-79

Affected products

• Bluespice (Hallo Welt Gmbh)
• Bluespice (Hallowelt)

References

• https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-05