← All advisories

Moderate severityNVD Advisory· Published Mar 8, 2022· Updated Aug 2, 2024

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

CVE-2022-0877

Description

Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ssddanbrown/bookstackPackagist	< 22.02.3	22.02.3

Affected products

2

ghsa-coords
pkg:composer/ssddanbrown/bookstack
Range: < 22.02.3
Bookstackapp/Bookstackapp/bookstackv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-5rcc-6cmj-7728ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0877ghsaADVISORY
github.com/bookstackapp/bookstack/commit/856fca8289b7370cafa033ea21c408e7d4303fd6ghsax_refsource_MISCWEB
huntr.dev/bounties/b04df4e3-ae5a-4dc6-81ec-496248b15f3cghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.