CVE-2022-50968
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
May 10, 2026
Vendor
unknown
Description
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests that execute in victims' browsers.