CVE-2022-3073CWE-79

Quaonos Schema ST4 example templates prone to XSS

Medium · published December 14, 2022

CVSS v3.1
6.1
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

Quanos "SCHEMA ST4" example web templates in version Bootstrap 2019 v2/2021 v1/2022 v1/2022 SP1 v1 or below are prone to JavaScript injection allowing a remote attacker to hijack existing sessions to e.g. other web services in the same environment or execute scripts in the users browser environment. The affected script is '*-schema.js'.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00484 · 40.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-12-14T08:17Z
EPSS history
Timeline
  • 14 DEC 08:17Z
    Quaonos Schema ST4 example templates prone to XSS
    cvelistv5