CVE-2022-34962 - OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module

Back Back to CVE browser

MEDIUM

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module

Published Jul 25, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 1.14%

Description

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37864
Advisory
https://github.com/bypazs/CVE-2022-34962
x_refsource_MISCExploitThird Party Advisory
https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3
x_refsource_MISCRelease NotesThird Party Advisory
https://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034
x_refsource_MISCExploitThird Party Advisory
https://www.opensource-socialnetwork.org/
x_refsource_MISCVendor Advisory
https://www.openteknik.com/contact?channel=ossn
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-37864		Advisory
https://github.com/bypazs/CVE-2022-34962		x_refsource_MISCExploitThird Party Advisory
https://github.com/opensource-socialnetwork/opensource-socialnetwork/releases/tag/6.3		x_refsource_MISCRelease NotesThird Party Advisory
https://grimthereaperteam.medium.com/cve-2022-34962-ossn-6-3-lts-stored-xss-vulnerability-at-group-timeline-6ebe28dd6034		x_refsource_MISCExploitThird Party Advisory
https://www.opensource-socialnetwork.org/		x_refsource_MISCVendor Advisory
https://www.openteknik.com/contact?channel=ossn		x_refsource_MISCVendor Advisory