CVE-2022-28586: Hoosk

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.

Affected products

• Hoosk Hoosk: version 1.8.0 only

Published 2022-04-25. Last modified 2026-06-17.