Aller au contenu
Se connecter
Non notée

CVE-2022-23047 Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the…

Description

Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site Header" parameters while updating the site settings on "/exponentcms/administration/configure_site"

Produits et versions touchés

Produit Versions touchées Corrigé en
Exponent CMS 2.6.0patch2 Pas de correctif indiqué

Autres CVE de Exponent CMS

Les 3 CVE de Exponent CMS →
CVE-2022-23049 Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header… Non notée CVE-2022-23048 Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP… Non notée
Suivre cette CVE