PT-2022-12935
CVE-2021-46827
·
Published
2022-07-13
·
Updated
2022-07-20
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Oxygen XML WebHelp versions prior to 22.1 build 2021082006
Oxygen XML WebHelp versions 23.x prior to 23.1 build 2021090310
Description
An issue in Oxygen XML WebHelp allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field, due to an XSS vulnerability in search terms proposals. This affects online documentation generated using Oxygen XML WebHelp.
Recommendations
For Oxygen XML WebHelp versions prior to 22.1 build 2021082006, update to version 22.1 build 2021082006 or later.
For Oxygen XML WebHelp versions 23.x prior to 23.1 build 2021090310, update to version 23.1 build 2021090310 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾