CVE-2022-3245
Code Injection in display of tag title on saving tags in microweber/microweber
Summary
Code Injection in display of tag title on saving tags in microweber/microweber
Original description
The description as published by the source.
HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev