CVE-2022-23077CWE-79

Habitica - DOM XSS in login page

published June 22, 2022

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00772 · 55.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-06-22T11:30Z
EPSS history
Timeline
  • 22 JUN 11:30Z
    Habitica - DOM XSS in login page
    cvelistv5