CVE-2022-26197

42th percentile - higher than 42% of all known CVEs

Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table. An attacker can inject a malicious script that will be executed in the victim's browser.

The risk involves potential session theft, data exfiltration, or unauthorized actions performed on behalf of the victim. This could compromise data confidentiality and integrity.

Immediately upgrade Joget DX to the latest version that includes a fix for this vulnerability. Additionally, apply input filtering and output encoding for data displayed in the Datalist table.