CVE-2022-25410

2022-02-2823:15:12

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.

CPENameOperatorVersion
cmseq0.94
cmseq0.91
cmseq97
cmseq0.89
cmseq0.88
cmseq104
cmseq0.90
cmseq0.92
cmseq0.87
cmseq0.87.1

Name	Operator	Version
cms	eq	0.94
cms	eq	0.91
cms	eq	97
cms	eq	0.89
cms	eq	0.88
cms	eq	104
cms	eq	0.90
cms	eq	0.92
cms	eq	0.87
cms	eq	0.87.1

Rows per page:

1-10 of 211

References

github.com/maxsite/cms/issues/485