Skip to content
OpenAdvisories
Unscored CVE-2022-23367 EUVD-2022-28446GHSA-j3fw-52mj-hqjw

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerabil…

Published Feb 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.

References