Description
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| habitica | habitica | v4.119.1 – < unspecified, unspecified – ≤ v4.232.2 | unspecified |
Unscored
CVE-2022-23077
EUVD-2022-28184GHSA-87gq-2rrf-c96r
Habitica - DOM XSS in login page
Published Jun 22, 2022 · Updated Sep 17, 2024 · Assigned by Mend