low2.3
CVE-2022-3893
Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the cus…
Impact
Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hallowelt | Bluespice | from 4.1.0 before 4.2.1 |