← Database

CVE-2022-3893

LOW CVSS: 2.3 Published: 2022-11-15 Modified: 2026-06-17

Description

Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.

Affected Platforms

Hallowelt Bluespice

Weakness Type

CWE-79, CWE-79

References