Vendor
CVE-2022-34961 is a stored cross-site scripting vulnerability in Open Source Social Network version 6.3 that allows authenticated attackers to execute malicious scripts via the location input field in the Users Timeline module.