simple_online_public_access_catalog vulnerabilities

CVEs whose affected-version data names the simple_online_public_access_catalog package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-42991Medium· 5.4

3y ago

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Account Full Name field.

▾ Sunlitsimple_online_public_access_catalog_project · simple_online_public_access_catalogEPSS 0.47%via NVD