CVE-2022-50964 | uBidAuction 2.0.1 GET loose filter date_created/date_from/date_to/created_at cross site scripting (Exploit 50693 / EUVD-2022-55985)

A vulnerability was found in . This affects the function filter of the file auctions/myAuctions/status/loose of the component GET Handler. Performing a manipulation of the argument date_created/date_from/date_to/created_at results in cross site scripting.

This vulnerability is known as CVE-2022-50964. Remote exploitation of the attack is possible. Furthermore, an exploit is available.