CoreCVE
Back

MEDIUM

Potential XSS on default page header

Published Nov 15, 2022

Description

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage.

Affected products

Remediation

Vendor solution

Upgrade to BlueSpice 4.2.1 or later

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner HW
Published Nov 15, 2022
Updated Apr 29, 2025
Reserved Oct 7, 2022
Link CVE-2022-41789
CISA Vulnrichment
Updated Apr 29, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-41789
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-41789