CVE-2022-1293 – XSS vulnerability in Citadel

https://notcve.org/view.php?id=CVE-2022-1293

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions. Una neutralización insertada de la etiqueta HTML relacionada con los scripts, es pasado por alto en el caso de algunas condiciones adicionales • https://www.ercom.com/security-updates • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) •