CVE-2022-44724 HIGH

CVE-2022-44724

Vendor N/A
Product n/a
Published November 4, 2022
Last update May 2, 2025
View on NVD All CVEs

CVSS base score

8.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:R

What the vulnerability does

01Description

The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

Key dates

02Disclosure timeline

November 4, 2022 CVE published
May 2, 2025 Record updated