GCVE-110-MAGEIA-2024-74

Advisory Published

Vulnetix · Advisory published March 20, 2024

A cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node. (CVE-2022-35133)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	cherrytree	0 (affected), 1.0.4-1.mga9 (unaffected)	—

References

Updated cherrytree packages fix security vulnerability

advisory

Updated cherrytree packages fix security vulnerability

issue

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON