CVE-2022-2514 — Cross-site Scripting (XSS) - Reflected in beancount/fava
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
Published: 2022-07-25 · CVSS: 8.0 · CVSS 3.0
The time and filter parameters in Fava prior to v1.22 are vulnerable to reflected XSS due to the lack of escaping of error messages which contained the parameters in verbatim.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7