Vulnerabilities > Proxmox > Virtual Environment > 5.1

DATE	CVE	VULNERABILITY TITLE	RISK
2022-12-14	CVE-2022-31358	Cross-site Scripting vulnerability in Proxmox Virtual Environment A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2-3 allows remote attackers to execute arbitrary web scripts or HTML via non-existent endpoints under path /api2/html/. network low complexity proxmox CWE-79 critical	9.0

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.