CVE-2022-42466

Name of the Vulnerable Software and Affected Versions SoftwareX versions prior to 2.0.0-M9

Description The issue allows an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. This enables the end-user to enter javascript or similar, which would be executed. The inputted strings are now properly escaped when rendered.

Recommendations For versions prior to 2.0.0-M9, update to version 2.0.0-M9 or later to ensure inputted strings are properly escaped when rendered.