medium6.1
CVE-2022-24177
A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scrip…
Impact
A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exlibrisgroup | Aleph 500 | Versions 18.1, 20.0 |