Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-39240 EUVD-2022-41762

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph

Published Sep 24, 2022 · Updated Apr 25, 2025 · Assigned by GitHub_M

Description

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround.

Affected products

VendorProductAffectedFixed
renlm MyGraph < 1.0.4 —

References