← All advisories

Medium severity5.4NVD Advisory· Published May 3, 2022· Updated Jun 17, 2026

CVE-2022-28588

CVE-2022-28588

Description

In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

SpringBootMovie/SpringBootMoviedescription
SpringBootMovie/SpringBootMoviellm-fuzzy
Range: <=1.2

Patches

Vulnerability mechanics

References

1

github.com/lkmc2/SpringBootMovie/issues/3nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.