← Database

CVE-2022-41611

LOW CVSS: 2.3 Published: 2022-11-15 Modified: 2026-06-17

Description

Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application.

Affected Platforms

Hallowelt Bluespice

Weakness Type

CWE-79, CWE-79

References