Skip to content
OpenAdvisories

Archive

21 April 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-29577 Public exploit

    Cross-site Scripting in OWASP AntiSamy

    OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2…

  • Medium 4.6
    CVE-2022-29548 Public exploit Scanner template EPSS 41%

    A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0,…