Medium · 6.1 Scanner template CVE-2022-43014 EUVD-2022-46063GHSA-7q2w-qxwp-wgj6

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter.

Published Oct 19, 2022 · Updated Sep 15, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

OpenCATS 0.9.6 - Cross-Site Scripting http/cves/2022/CVE-2022-43014.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_joborderID.md
https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43014