CVE-2022-29649

MediumCVSS 6.1

Published: 15/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability. This allows an attacker to inject malicious JavaScript code into the web page.

Risk Assessment

The risk includes potential session hijacking, redirection to malicious sites, or theft of sensitive data. The attack can be carried out by sending a crafted link or placing malicious code on the page.

Recommendation

It is recommended to immediately update Qsmart Next to the latest available version that fixes this vulnerability. Input filtering and validation mechanisms should also be implemented.

Original NVD description (English source)

Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.