CVE-2022-26842: XSS

Published Aug 22, 2022

Updated

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

Affected Software

1 affected component

WWBN AVideo=11.6

Event History

Aug 22, 2022

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-26842?

The severity of CVE-2022-26842 is considered high due to its potential for arbitrary JavaScript execution.

How do I fix CVE-2022-26842?

To fix CVE-2022-26842, you should update to the latest version of WWBN AVideo that addresses this vulnerability.

What type of vulnerability is CVE-2022-26842?

CVE-2022-26842 is a reflected cross-site scripting (XSS) vulnerability.

Who is affected by CVE-2022-26842?

CVE-2022-26842 affects users of WWBN AVideo version 11.6 and certain development versions.

What can an attacker do with CVE-2022-26842?

An attacker exploiting CVE-2022-26842 can execute arbitrary JavaScript in the context of an authenticated user's session.