CVE-2022-4866

CRITICAL9.0EPSS 0.47%

usememos/memos vulnerable to Cross-site Scripting

Published: 12/31/2022Modified: 11/8/2023

Description

Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References (4)