CVE-2022-23367: Fulusso Project Fulusso

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.

Affected products

• Fulusso Project Fulusso: version 1.1 only

Published 2022-02-14. Last modified 2026-06-17.