CVE-2022-28379

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion

Medium · published April 3, 2022

Patch now

High probability of exploitation

CVSS calls it medium at 6.8. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1
6.8
EPSS
71%
Percentile
99.4
In the wild
Unconfirmed
What it is

jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.71209 · 99.4th percentile
Published
2022-04-03T17:42Z
EPSS history
Timeline
  • 03 APR 17:42Z
    jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion
    cvelistv5