Unscored CVE-2022-35554 EUVD-2022-38440GHSA-wv3h-vp77-x5r8

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute j…

Published Aug 19, 2022 · Updated Jul 9, 2026 · Assigned by mitre

Description

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

References

https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/reflected-xss-in-smartvista-cardgen-version-3.28.0-cve-2022-35554