Skip to content
OpenAdvisories
Medium · 4.8 CVE-2022-40711 EUVD-2022-43981GHSA-6p47-w2hq-8j72

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS paylo…

Published Jan 1, 2023 · Updated Apr 11, 2025 · Assigned by mitre

Description

PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section. A user with the RA Administrator role can inject an XSS payload to target higher-privilege users.

References