2022-06-20

2022-06-21

2022-06-22

All (3) Critical (7) High (18) Medium (15) Low (3)

CVE-2022-23074 LOW POC PATCH Monitor

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Keyword, Food and Unit components. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

XSS Recipes

NVD GitHub

CVSS 2.0

3.5

EPSS

0.8%

CVE-2022-23073 LOW POC PATCH Monitor

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in copy to clipboard functionality. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

XSS Recipes

NVD GitHub

CVSS 2.0

3.5

EPSS

0.8%

CVE-2022-23072 LOW POC PATCH Monitor

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in “Add to Cart” functionality. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.

XSS Recipes

NVD GitHub

CVSS 2.0

3.5

EPSS

0.8%