← Database

CVE-2022-42001

LOW CVSS: 3.3 Published: 2022-11-15 Modified: 2026-06-17

Description

Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

Affected Platforms

Hallowelt Bluespice

Weakness Type

CWE-79, CWE-79

References