Medium · 6.1 Scanner template CVE-2022-43016 EUVD-2022-46065GHSA-p8jv-6jrx-xjm6

OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component.

Published Oct 19, 2022 · Updated Sep 15, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

OpenCATS 0.9.6 - Cross-Site Scripting http/cves/2022/CVE-2022-43016.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/hansmach1ne/opencats_zero-days/blob/main/XSS_in_callback.md
https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43016