CVE-2022-28588: Springbootmovie Project Springbootmovie

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS.

Affected products

• Springbootmovie Project Springbootmovie: up to and including 1.2

Published 2022-05-03. Last modified 2026-06-17.