XSS in Infogami

CVE-2022-32159

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (54.7th percentile) — read the EPSS interpretation.

Affected products

Infogami — versions unspecified, 0.2, ol_201908

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

vulnerabilitylab@mend.io (Third Party Advisory, x_refsource_MISC)
vulnerabilitylab@mend.io (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-32159?: CVE-2022-32159 is a vulnerability in Infogami, classified under Cross-site Scripting. Published 2022-06-22.
Is CVE-2022-32159 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.