← All advisories

Medium severity6.1NVD Advisory· Published Jul 3, 2022· Updated Jun 17, 2026

CVE-2022-2290

CVE-2022-2290

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Triliumnotes/Trilium
cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*
Range: <0.52.4
Zadam/triliumllm-fuzzy
Range: <0.52.4, <0.53.1-beta
zadam/zadam/triliumv5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/zadam/trilium/commit/3faae63b849a1fabc31b823bb7af3a84d32256a7nvdPatchThird Party Advisory
huntr.dev/bounties/367c5c8d-ad6f-46be-8503-06648ecf09cfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.