CVE-2022-23367

Publication date

2022-02-14 17:45:45

Family

mitre

State

PUBLISHED

Description

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim users device via open redirection.