CVEvulnerability

CVE-2021-46827

6.1 MEDIUM Published 2022-07-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.

Affected configurations

• sync oxygen publishing engine (< 22.1) • sync oxygen publishing engine 22.1 • sync oxygen publishing engine 23.1 • sync oxygen xml author (< 22.1) • sync oxygen xml author 22.1 • sync oxygen xml author 23.1 • sync oxygen xml developer (< 22.1) • sync oxygen xml developer 22.1 • sync oxygen xml developer 23.1 • sync oxygen xml editor (< 22.1) • sync oxygen xml editor 22.1 • sync oxygen xml editor 23.1 • sync oxygen xml webhelp (< 22.1) • sync oxygen xml webhelp 22.1 • sync oxygen xml webhelp 23.1

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References