What is GHSA-3877-6pj5-6gwv?

GHSA-3877-6pj5-6gwv is a security advisory published by GitHub Security Advisories with Medium severity. Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui...

Which CVE IDs does GHSA-3877-6pj5-6gwv cover?

GHSA-3877-6pj5-6gwv covers the following CVE IDs: CVE-2022-26962. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3877-6pj5-6gwv?

GHSA-3877-6pj5-6gwv has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-3877-6pj5-6gwvMediumCVSS 5.4

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui...

Vendor

GitHub Security Advisories

Published

September 10, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2022-26962 →

📋 Description

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then be triggered every time an authenticated user browses the page containing it.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-26962
https://www.gruppotim.it/it/footer/red-team/2022/CVE-2022-26962-Italtel-NFV.html
https://github.com/advisories/GHSA-3877-6pj5-6gwv