← Database

CVE-2022-27258

MEDIUM CVSS: 6.1 Published: 2022-04-15 Modified: 2026-06-17

Description

Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.

Affected Platforms

Hubzilla Hubzilla

Weakness Type

CWE-79

References