TI-2022-04452 CVE-2022-4859 · GHSA-92hm-c572-wrpc
Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting
Priority LOW 28
A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33.
Vulnerabilities
4 records
TI-2022-04164 CVE-2022-4560 · GHSA-8w8g-mvf3-8xmp
Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting
Priority LOW 28
A vulnerability was found in Joget up to 7.0.31.
TI-2022-09626 CVE-2022-26197 · GHSA-6jm5-2wv4-fcqc
Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.
Priority LOW 25
Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.
TI-2019-10696 CVE-2019-14352 · GHSA-6267-49mh-p6x2
In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as…
Priority HIGH 69
In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userview_sales/_/account_new with the Account ID or Account Name field.