CVE-2022-42991Medium· 5.4▾ Sunlit

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score30/ 100 · Low

impact 29.7 · likelihood 0.1 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2022-42991 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.