PyPI/collective-contact-widget CVE-2022-4638: medium 6.1, EPSS 0.42%

collective.contact.widget is vulnerable to cross-site scripting

Action: Upgrade collective-contact-widget to 1.13 or later.

pip install collective-contact-widget==1.13

Affected

Fixed versions

Sources

• osv: GHSA-5pqf-rvm7-3wgw
• https://nvd.nist.gov/vuln/detail/CVE-2022-4638
• https://github.com/collective/collective.contact.widget/commit/5da36305ca7ed433782be8901c47387406fcda12
• https://github.com/collective/collective.contact.widget
• https://github.com/pypa/advisory-database/tree/main/vulns/collective-contact-widget/PYSEC-2022-42988.yaml
• https://vuldb.com/?id.216496

CVE-2022-4638 · published 2022-12-22T00:30:36Z · modified 2024-09-13T15:25:50.374098Z · JSON