Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Simple Online Public Access Catalog Project Clear all filters
TI-2022-20966 CVE-2022-42991 · GHSA-v7qv-2wqg-22q9

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog…

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00544 Published 2022-10-27 No fix listed CWE-79