Hallo Welt! GmbH BlueSpice
0 remedies
cpe:2.3:a:hallowelt:bluespice:*:*:*:*:*:*:*
0 remedies
- >= 5, <= 5.1.1
Hallo Welt! GmbH BlueSpice BlueSpiceAvatars Extension Cross-Site Scripting Vulnerability
Vulnerability
A Cross-Site Scripting (XSS) vulnerability has been identified in the BlueSpiceAvatars extension for BlueSpice versions 5 through 5.1.1. This issue arises from improper encoding or escaping of output, which can be exploited to inject malicious scripts.
Impact
Exploitation of this vulnerability allows for Cross-Site Scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed in the context of the user's browser.
Added: Sep 19, 2025, 2:18 PM
Updated: Sep 19, 2025, 4:10 PM
Vulnerability Rating
Custom Algorithm
spread
3.1impact
1.7exploitability
5.0remediation
0.0relevance
0.5threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.