Unscored CVE-2022-27496 EUVD-2022-31997GHSA-x3m9-7vqx-4jp2

Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via u…

Published Mar 31, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Zero-Channel BBS Plus Developers Product: Zero-channel BBS Plus

Description

Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Zero-Channel BBS Plus Developers	Zero-channel BBS Plus	v0.7.4 and earlier	—

References

https://osdn.net/projects/zerochplus/releases/77053
https://jvn.jp/en/jp/JVN59576930/index.html