CVE-2022-3958 — Potential XSS on personal menu navigation
Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the p…
Published: 2022-11-15 · CVSS: 3.3 · CVSS 3.1
Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7