CVE-2022-0936 HIGH

CVE-2022-0936: Cross-site Scripting (XSS) - Stored in autolab/autolab

Vendor Autolab
Product autolab/autolab
Weakness CWE-79 · XSS
Published April 11, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.

Key dates

02Disclosure timeline

April 11, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7802 PHPGurukul Complaint Management System complaint-search.php cross site scripting CVE-2025-13512 CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] CVE-2023-48562 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-64833 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-23608 WordPress LIVE TV plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability