Potential XSS on personal menu navigation
Priority LOW 24CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted attacks.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00274 19th percentileScored 2026-11-07
Fix Fixed BlueSpice (Hallo Welt! GmbH): 4.2.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hallo Welt! GmbH | BlueSpice | 4 to before 4.2.1 | 4.2.1 | Patch available | CNA |
- BlueSpice VendorHallo Welt! GmbH Affected 4 to before 4.2.1 Fixed in 4.2.1 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:* | 4.1.0 to before 4.2.1 | Vulnerable | Hallo Welt! GmbH |
- cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:* Versions 4.1.0 to before 4.2.1 Vulnerable ·Hallo Welt! GmbH
Remediation
- Fix · CNA BlueSpice (Hallo Welt! GmbH) Fixed in 4.2.1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Hallo Welt! BlueSpice 4.2.1
7 records Highest priority Priority LOW 7 LOW
Other records, highest priority first
- TI-2022-20340 Potential XSS in book navigationPriority LOW 24
- TI-2022-20339 Potential XSS in comment sectionPriority LOW 24
- TI-2022-20182 Potential XSS in history viewPriority LOW 24
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3958
- 2026-10-03 Alias added: GHSA-hw93-9r88-26rp
References
More Hallo Welt! GmbH Bluespice vulnerabilities
- TI-2022-02320 Potential XSS in title URL parameter CVSS 3.1MEDIUM 6.1
- TI-2022-02319 Potential XSS on Special:SearchCenter CVSS 3.1MEDIUM 6.1
- TI-2022-03572 Potential XSS in common user interface component library CVSS 3.1MEDIUM 6.1
- TI-2025-35941 Potential XSS in Extension:CognitiveProcessDesigner CVSS 4.0MEDIUM 5.9
- TI-2025-35734 Potential XSS in Extension:BlueSpiceWhoIsOnline CVSS 4.0MEDIUM 5.9
- TI-2025-30391 Potential XSS in Extension:BlueSpiceAvatars CVSS 4.0MEDIUM 5.9
Sources
- CVE-2022-3958 · CVE Program
- CVE-2022-3958 · NVD
- FIRST EPSS
- GHSA-hw93-9r88-26rp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences