CVE-2022-30072

2022-05-1717:15:08

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.

CPENameOperatorVersion
wbce_cmseq1.4.2
wbce_cmseq1.1.2
wbce_cmseq1.1.4
wbce_cmseq1.5.2
wbce_cmseq1.1.1
wbce_cmseq1.5.0
wbce_cmseq1.0.0
wbce_cmseq1.0.0-beta.2
wbce_cmseq1.5.1
wbce_cmseq1.3.2

Name	Operator	Version
wbce_cms	eq	1.4.2
wbce_cms	eq	1.1.2
wbce_cms	eq	1.1.4
wbce_cms	eq	1.5.2
wbce_cms	eq	1.1.1
wbce_cms	eq	1.5.0
wbce_cms	eq	1.0.0
wbce_cms	eq	1.0.0-beta.2
wbce_cms	eq	1.5.1
wbce_cms	eq	1.3.2