CVE-2022-46391

Name of the Vulnerable Software and Affected Versions AWStats versions 7.x through 7.8

Description The issue allows for XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

Recommendations For versions 7.x through 7.8, consider disabling the hostinfo plugin until a patch is available to prevent potential XSS attacks. As a temporary workaround, restrict the use of the Net::XWhois response in the hostinfo plugin to minimize the risk of exploitation.