CVE-2022-38167

Name of the Vulnerable Software and Affected Versions Nintex Workflow plugin version 5.2.2.30 for SharePoint

Description The issue allows for Cross-Site Scripting (XSS), which is a type of attack where an attacker can inject malicious scripts into a website. This can lead to unauthorized access or control of user sessions.

Recommendations For Nintex Workflow plugin version 5.2.2.30, consider disabling the plugin until a patch is available to prevent potential XSS attacks. Restrict access to the plugin to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.