Medium · 6.1 Scanner template CVE-2022-43015 EUVD-2022-46064GHSA-m3gx-gwm4-3wwm

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter.

Published Oct 19, 2022 · Updated Sep 15, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

OpenCATS 0.9.6 - Cross-Site Scripting http/cves/2022/CVE-2022-43015.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_entriesPerPage.md
https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43015