← Database

CVE-2022-25220

MEDIUM CVSS: 4.8 Published: 2022-03-03 Modified: 2026-06-17

Description

PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.

Affected Platforms

Petereport Project Petereport

Weakness Type

CWE-79

References