← All advisories

Medium severity4.0NVD Advisory· Published Nov 15, 2022· Updated Jun 17, 2026

CVE-2022-3895

CVE-2022-3895

Description

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Hallowelt/Bluespice
cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*:*
Range: >=4.1.0,<4.2.1
Hallowelt/Common User Interface
cpe:2.3:a:hallowelt:common_user_interface:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.0.5
BlueSpice/Common User Interface Componentllm-fuzzy
Hallo Welt! GmbH/Common User Interface Componentv5
Range: 3

Patches

Vulnerability mechanics

References

1

en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2022-08nvdVendor Advisory

News mentions

0

No linked articles in our index yet.