CVE-2022-40778

A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML…

published September 19, 2022

CVSS
—
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Published
2022-09-19T06:08Z
EPSS history
Timeline
  • 19 SEP 06:08Z
    A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML…
    cvelistv5