CVE-2022-3464

🗓️ 12 Oct 2022 00:00:00Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 47 Views🌐 WEB

A problematic cross-site scripting vulnerability in puppyCMS up to 5.1 allows remote attackers to manipulate the site_name argument in /admin/settings.php, leading to an attack

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-3464	12 Oct 202214:26	–	circl
CNNVD	puppyCMS 跨站脚本漏洞	12 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-3464 puppyCMS settings.php cross site scripting	12 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-42836	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3464	12 Oct 202210:15	–	nvd
Prion	Cross site scripting	12 Oct 202210:15	–	prion
Positive Technologies	PT-2022-22262 · Puppycms · Puppycms	12 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3464	22 May 202522:13	–	redhatcve

NVD

Vulners

Node

puppycms puppycmsRange≤5.1

[
  {
    "vendor": "unspecified",
    "product": "puppyCMS",
    "versions": [
      {
        "version": "5.0",
        "status": "affected"
      },
      {
        "version": "5.1",
        "status": "affected"
      }
    ]
  }
]