CVE-2022-38550

https://notcve.org/view.php?id=CVE-2022-38550

19 Sep 2022 — A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en el componente /weibo/list de Jeesns versión v2.0.0, permite a atacantes ejecutar scripts web o HTML arbitrarios por medio de una carga útil diseñada • https://github.com/Pick-program/JEESNS/issues/1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •