CVEDB API

An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-controlled description.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2022-25317

Cerebrate-Project » Cerebrate » Version: 0.1

cpe:2.3:a:cerebrate-project:cerebrate:0.1
Cerebrate-Project » Cerebrate » Version: 0.2

cpe:2.3:a:cerebrate-project:cerebrate:0.2
Cerebrate-Project » Cerebrate » Version: 0.3

cpe:2.3:a:cerebrate-project:cerebrate:0.3
Cerebrate-Project » Cerebrate » Version: 1.0

cpe:2.3:a:cerebrate-project:cerebrate:1.0
Cerebrate-Project » Cerebrate » Version: 1.1

cpe:2.3:a:cerebrate-project:cerebrate:1.1
Cerebrate-Project » Cerebrate » Version: 1.1.1

cpe:2.3:a:cerebrate-project:cerebrate:1.1.1
Cerebrate-Project » Cerebrate » Version: 1.2

cpe:2.3:a:cerebrate-project:cerebrate:1.2
Cerebrate-Project » Cerebrate » Version: 1.3

cpe:2.3:a:cerebrate-project:cerebrate:1.3
Cerebrate-Project » Cerebrate » Version: 1.4

cpe:2.3:a:cerebrate-project:cerebrate:1.4