medium5.4
CVE-2022-48013
Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar.
Impact
Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opencats | Opencats | Version 0.9.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities
- https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-Stored%20XSS%20in%20Calendar-Add-Event.md
- https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities
- https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-Stored%20XSS%20in%20Calendar-Add-Event.md