CVE-2022-23077: Habitica

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

Affected products

• Habitica Habitica: from 4.119.0, before 4.233.0 (fixed in 4.233.0)

Published 2022-06-22. Last modified 2026-06-17.