CVE-2022-44303: Resque-Scheduler Project Resque-Scheduler

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" parameter in /resque/delayed/jobs/{schedule_job}?args={args_id} to execute javascript at client side.

Affected products

• Resque-Scheduler Project Resque-Scheduler: affected versions not specified

Published 2022-12-13. Last modified 2026-07-09.