Vulnerability Description: Multiple Stored Cross Site Scripting (XSS) – CWE-79
Software Version: 11.1.2-20210318
NIST: https://nvd.nist.gov/vuln/detail/cve-2022-26962
CVSSv3:
Severity:
Credits: Valerio Alessandroni, Matteo Brutti, Massimiliano Brolli
Multiple Cross-site scripting Stored (XSS) vulnerability allows a remote attackers to inject arbitrary web script or HTML into HTTP/GET parameter which reflects the user input without sanitization.
Security Impact
Unauthorized javascript code execution on victim’s browser can lead to a privilege escalation through session stealing and to install malwares on victim’s machine.