CVE-2022-28586

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p50

Published

Apr 25, 2022 (Apr 25, 2022)

Modified

Jun 17, 2026

Description

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.

Vendors: hoosk
Products: hoosk
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.