Medium · 5.4 CVE-2022-25507 EUVD-2022-1427GHSA-gjh6-wvhq-h4qxPYSEC-2026-639

Cross-site Scripting in FreeTAKServer-UI

Published Mar 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Callsign parameter.

Ecosystem	Package	Affected	Fixed	Record
PyPI	freetakserver-ui	<= 1.9.8	—	GHSA-gjh6-wvhq-h4qx

OSV:GHSA	v3.1	5.4
OSV:PYSEC	v3.1	5.4