CVE-2022-40434 - Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page

CRITICAL

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page

Published Dec 19, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.10%

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43713		Advisory
https://isaghojaria.medium.com/softr-v2-0-was-discovered-to-be-vulnerable-to-html-injection-via-the-name-field-of-the-account-page-c6fbd3162254		ExploitThird Party Advisory
https://www.softr.io/		Product