medium4.0
CVE-2022-3895
Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
Impact
Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hallowelt | Bluespice | from 4.1.0 before 4.2.1 |
| Hallowelt | Common User Interface | from 3.0.0 before 3.0.5 |