CVE-2022-22868: Gibbonedu Gibbon

Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that allows attackers to inject arbitrary script via name parameters.

Affected products

• Gibbonedu Gibbon: version 22.0.01 only

Published 2022-01-28. Last modified 2026-06-17.