← Database

CVE-2022-36859

MEDIUM CVSS: 5.7 Published: 2022-09-09 Modified: 2026-06-17

Description

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices.

Affected Platforms

Samsung Smarttagplugin

Weakness Type

CWE-20, CWE-79

References