PT-2023-22699

CVE-2023-30452

·

Published

2023-05-16

·

Updated

2023-05-25

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions MoroSystems EasyMind - Mind Maps plugin versions prior to 2.15.0 for Confluence
Description The issue allows persistent XSS when saving a Mind Map with the hyperlink parameter. This can lead to the execution of malicious scripts within the application.
Recommendations For MoroSystems EasyMind - Mind Maps plugin versions prior to 2.15.0, update to version 2.15.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the hyperlink parameter when saving Mind Maps until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾