Back to Database
Status published
Medium
CVE-2022-2510
Potential XSS on Special:SearchCenter
Vulnerability Description
Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page "Special:SearchCenter", using the search term in the URL.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2510
Credits & Attribution
No credits recorded in the NVD database.
More from Hallo Welt! GmbH
View All →CVE-2025-58114
Potential XSS in Extension:CognitiveProcessDesigner
Medium
5.9
CVE-2025-57880
Potential XSS in Extension:BlueSpiceWhoIsOnline
Medium
5.9
CVE-2025-48007
Potential XSS in Extension:BlueSpiceAvatars
Medium
5.9
CVE-2025-46703
Potential XSS in Extension:AtMentions
Medium
5.9
CVE-2023-42431
Potential XSS on user preferences page
Low
2.1
Affected Vendor
Hallo Welt! GmbH
View all reports →Affected Software
BlueSpice
Vulnerable Versions:
4, 3
Timeline
Official Publish:
July 22nd, 2022
Last Modified:
September 16th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N