Potential XSS on custom menu navigation
Priority LOW 22CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00281 20th percentileScored 2026-11-07
Fix Fixed BlueSpice (Hallo Welt! GmbH): 4.2.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hallo Welt! GmbH | BlueSpice | 4 to before 4.2.1 | 4.2.1 | Patch available | CNA |
- BlueSpice VendorHallo Welt! GmbH Affected 4 to before 4.2.1 Fixed in 4.2.1 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:* | 4.1.0 to before 4.2.1 | Vulnerable | Hallo Welt! GmbH |
- cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:* Versions 4.1.0 to before 4.2.1 Vulnerable ·Hallo Welt! GmbH
Remediation
- Fix · CNA BlueSpice (Hallo Welt! GmbH) Fixed in 4.2.1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Hallo Welt! BlueSpice 4.2.1
7 records Highest priority Priority LOW 7 LOW
Other records, highest priority first
- TI-2022-20340 Potential XSS in book navigationPriority LOW 24
- TI-2022-20339 Potential XSS in comment sectionPriority LOW 24
- TI-2022-20182 Potential XSS in history viewPriority LOW 24
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3893
- 2026-10-03 Alias added: GHSA-pggj-5r99-rf46
References
More Hallo Welt! GmbH Bluespice vulnerabilities
- TI-2022-02320 Potential XSS in title URL parameter CVSS 3.1MEDIUM 6.1
- TI-2022-02319 Potential XSS on Special:SearchCenter CVSS 3.1MEDIUM 6.1
- TI-2022-03572 Potential XSS in common user interface component library CVSS 3.1MEDIUM 6.1
- TI-2025-35941 Potential XSS in Extension:CognitiveProcessDesigner CVSS 4.0MEDIUM 5.9
- TI-2025-35734 Potential XSS in Extension:BlueSpiceWhoIsOnline CVSS 4.0MEDIUM 5.9
- TI-2025-30391 Potential XSS in Extension:BlueSpiceAvatars CVSS 4.0MEDIUM 5.9
Sources
- CVE-2022-3893 · CVE Program
- CVE-2022-3893 · NVD
- FIRST EPSS
- GHSA-pggj-5r99-rf46 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences