CVE-2022-4336: Bt Baota

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

In BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain sensitive information via the log analysis feature.

Affected products

• Bt Baota: from 7.9.4, up to and including 7.9.5

Published 2022-12-09. Last modified 2026-06-17.