CVE-2022-4348 – y_project RuoYi-Cloud JSON cross site scripting

https://notcve.org/view.php?id=CVE-2022-4348

08 Dec 2022 — A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. • https://gitee.com/y_project/RuoYi-Cloud/issues/I5IRC8 • CWE-707: Improper Neutralization •