What’s Vulnerable › Vulnerabilities

CVE-2022-2925: Cross-site Scripting (XSS) - Stored in appwrite/appwrite

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-09 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site Scripting (XSS) - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1.

Affected products

• appwrite/appwrite: through 0.15.3

References

• https://github.com/appwrite/appwrite/commit/b5b4d92623c13fa8e5c71736db461e81fb7a7ade
• https://huntr.dev/bounties/a3b4148f-165f-4583-abed-5568696d99dc
• https://github.com/appwrite/appwrite/commit/b5b4d92623c13fa8e5c71736db461e81fb7a7ade
• https://huntr.dev/bounties/a3b4148f-165f-4583-abed-5568696d99dc

Get alerted when CVE-2022-2925 or the next vulnerability affects your stack