What’s Vulnerable › Vulnerabilities

CVE-2022-30777

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-16 · updated 2026-06-17
• Weakness: CWE-79

Description

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

Affected products

• Parallels H-Sphere: 3.6.2

References

• https://en.wikipedia.org/wiki/H-Sphere
• https://medium.com/%40bhattronit96/cve-2022-30777-45725763ab59
• https://en.wikipedia.org/wiki/H-Sphere
• https://medium.com/%40bhattronit96/cve-2022-30777-45725763ab59

Get alerted when CVE-2022-30777 or the next vulnerability affects your stack