CVE-2022-25869 MEDIUM

CVE-2022-25869

Vendor N/A
Product angular
Weakness CWE-79 · XSS
Published July 15, 2022
Last update July 28, 2025
View on NVD All CVEs

CVSS base score

4.2/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P

What the vulnerability does

01Description

All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Cross-site Scripting (XSS) due to insecure page caching in the Internet Explorer browser, which allows interpolation of <textarea> elements.

Key dates

02Disclosure timeline

July 15, 2022 CVE published
July 28, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-24498 Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2024-2084 HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lightbox Widget CVE-2023-4517 Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp CVE-2022-2691 SourceCodester Wedding Hall Booking System Profile Page cross site scripting CVE-2026-3572 iTracker360 <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'itracker_license' Settings Field