CVE-2022-4348 – y_project RuoYi-Cloud JSON cross site scripting

https://notcve.org/view.php?id=CVE-2022-4348

A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. • https://gitee.com/y_project/RuoYi-Cloud/issues/I5IRC8 https://vuldb.com/?id.215108 • CWE-707: Improper Neutralization •