← All advisories

Medium severity6.1NVD Advisory· Published Dec 4, 2022· Updated Jun 17, 2026

CVE-2022-46391

CVE-2022-46391

Description

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

AWStats/Awstats3 versions
cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:awstats:awstats:*:*:*:*:*:*:*:*range: >=7.0,<=7.8
- (no CPE)
- (no CPE)range: 7.x <= 7.8
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

github.com/eldy/AWStats/pull/226nvdIssue TrackingPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2022/12/msg00010.htmlnvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GRFYH4DE3COMI3LJCOQQXA4FWOABU6Z2/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYUZIFVB4N3NK4WGNHRNXZKJITCJBJX4/nvd

News mentions

0

No linked articles in our index yet.