CVE-2022-31298

Published June 16th, 2022

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

bigzooooz/CVE-2022-31298

Haraj Script 3.7 - Authenticated Stored XSS

GitHub