CVE-2022-50969 | uBidAuction 2.0.1 GET manage filter date_created/date_from/date_to/created_at cross site scripting (Exploit 50693 / EDB-50693)

A vulnerability identified as problematic has been detected in uBidAuction 2.0.1. Affected by this issue is the function filter of the file backend/mailingLog/manage of the component GET Handler. This manipulation of the argument date_created/date_from/date_to/created_at causes cross site scripting.

The identification of this vulnerability is CVE-2022-50969. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.