CVE-2022-32770: XSS

Published Aug 22, 2022

Updated

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.This vulnerability arrises from the "toast" parameter which is inserted into the document with insufficient sanitization.

Affected Software

1 affected component

WWBN AVideo=11.6

Event History

Aug 22, 2022

CVE Published

via MITRE·06:27 PM

Data Sourced

via MITRE·06:27 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-32770?

The severity of CVE-2022-32770 is rated as critical with a CVSS score of 6.1.

What software versions are affected by CVE-2022-32770?

The cross-site scripting vulnerability CVE-2022-32770 affects WWBN AVideo version 11.6.

How can an attacker exploit CVE-2022-32770?

An attacker can exploit the vulnerability by getting an authenticated user to send a specially-crafted HTTP request, leading to arbitrary Javascript execution.