SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-4400

A vulnerability was found in zbl1996 FS-Blog and classified as problematic.

MEDIUM 6.1EPSS 0.36%

Does this matter?

Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-215267.

CVSS 3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.36% probability · 30th percentile
CISA KEV
Not listed
Weakness
CWE-707, CWE-79
Affected
fs-blog project/fs-blog
Source
cna@vuldb.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.