CVE-2022-35554

6.1 mediumEPSS 0.5%

Medium (6.1) in bpcbt smartvista. EPSS 0.5% chance of exploitation in the next 30 days.

Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-08-19
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

bpcbt:smartvista

References

https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/reflected-xss-in-smartvista-cardgen-version-3.28.0-cve-2022-35554
https://tf1t.gitbook.io/mycve/smartvista/smartvista-cardgen/reflected-xss-in-smartvista-cardgen-version-3.28.0-cve-2022-35554

Check your stack JSON