CVE-2022-50968 | uBidAuction 2.0.1 GET auctions/manage filter date_created/date_from/date_to/created_at cross site scripting (Exploit 50693 / EDB-50693)

A vulnerability labeled as problematic has been found in uBidAuction 2.0.1. This affects the function filter of the file auctions/manage of the component GET Handler. Such manipulation of the argument date_created/date_from/date_to/created_at leads to cross site scripting.

This vulnerability is referenced as CVE-2022-50968. It is possible to launch the attack remotely. Furthermore, an exploit is available.