CVE-2022-2290 MEDIUM

CVE-2022-2290: Cross-site Scripting (XSS) - Reflected in zadam/trilium

Vendor Zadam
Product zadam/trilium
Weakness CWE-79 · XSS
Published July 3, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.

Key dates

02Disclosure timeline

July 3, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-1074 WP App Bar <= 1.5 - Unauthenticated Stored Cross-Site Scripting via 'app-bar-features' Parameter CVE-2023-40677 WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS) CVE-2024-3615 Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's' CVE-2023-32072 Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job CVE-2024-29217 Apache Answer: XSS vulnerability when changing personal website