Aller au contenu
Se connecter
Non notée

CVE-2022-23049 Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header…

Description

Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.

Produits et versions touchés

Produit Versions touchées Corrigé en
Exponent CMS 2.6.0patch2 Pas de correctif indiqué

Autres CVE de Exponent CMS

Les 3 CVE de Exponent CMS →
CVE-2022-23048 Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP… Non notée CVE-2022-23047 Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the… Non notée
Suivre cette CVE