CVE-2022-48085

MediumCVSS 5.4

Published: 06/02/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

44th percentile - higher than 44% of all known CVEs

Summary

Softr v2.0 was found to contain an HTML injection vulnerability via the Work Space Name parameter. An attacker can inject malicious HTML code that will be executed in the victim's browser.

Risk Assessment

The risk involves potential phishing attacks or session theft by displaying crafted HTML content in the application interface.

Recommendation

It is recommended to update Softr to the latest version and implement input validation and encoding for the Work Space Name parameter.

Original NVD description (English source)

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.