CVE-2022-4638

—

CVSS 3.1

6.1 medium

EPSS

<1%p32

Published

Dec 21, 2022 (Dec 21, 2022)

Modified

Jun 17, 2026

Description

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.

Vendors: collective.contact.widget project
Products: collective.contact.widget
Weakness: CWE-707, CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.