CVE-2022-42993

36th percentile - higher than 36% of all known CVEs

Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup page. This allows an attacker to inject malicious scripts through improperly sanitized input fields.

An attacker can exploit this vulnerability to steal user sessions, redirect to malicious sites, or perform other actions in the victim's browser context, compromising data confidentiality and integrity.

Immediately update the application to the latest patched version and implement input validation and output encoding on the Setup page.