← Database

CVE-2022-45890

MEDIUM CVSS: 6.1 Published: 2022-12-25 Modified: 2026-06-17

Description

In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting (XSS) vulnerability exists via any metadata filter field (e.g., search within Default.aspx with the r or fo parameter).

Affected Platforms

Planetestream Planet Estream

Weakness Type

CWE-79, CWE-79

References