Skip to content
OpenAdvisories
High · 7.2 CVE-2022-3901 EUVD-2022-43237GHSA-h2jj-59xj-6r28

Visioweb.js - Prototype Pollution can results in XSS

Published Feb 20, 2023 · Updated Apr 1, 2025 · Assigned by DIVD

Vendor: Visio Globe Product: Visioweb

Description

Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.

Affected products

VendorProductAffectedFixed
Visio Globe Visioweb ≤ 1.10.6 —

References