CVE-2022-3895

6.1 mediumEPSS 0.3%

Medium (6.1) in hallowelt. EPSS 0.3% chance of exploitation in the next 30 days.

Some UI elements of the Common User Interface Component are not properly sanitizing output and therefore prone to output arbitrary HTML (XSS).

Severity

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19