CVE-2022-1682CWE-79

Reflected Xss using url based payload in neorazorx/facturascripts

Critical · published May 12, 2022

CVSS v3.0
9.4
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser

The record
Technical detail
CVSS v3.0
9.4 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00758 · 54.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-05-12T08:15Z
EPSS history
Timeline
  • 12 MAY 08:15Z
    Reflected Xss using url based payload in neorazorx/facturascripts
    cvelistv5