← Back to CVE List

CVE-2022-40288

Published: 2022-10-31T21:15Z
Last Modified: 2024-11-21T07:21Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, which could be leveraged to escalate privileges within and compromise any account that views their user profile. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt