CVE-2022-30073

2022-05-1716:15:09

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.8%

JSON

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.

CPENameOperatorVersion
wbce_cmseq1.4.2
wbce_cmseq1.1.2
wbce_cmseq1.1.4
wbce_cmseq1.5.2
wbce_cmseq1.1.1
wbce_cmseq1.5.0
wbce_cmseq1.0.0
wbce_cmseq1.0.0-beta.2
wbce_cmseq1.5.1
wbce_cmseq1.3.2

Name	Operator	Version
wbce_cms	eq	1.4.2
wbce_cms	eq	1.1.2
wbce_cms	eq	1.1.4
wbce_cms	eq	1.5.2
wbce_cms	eq	1.1.1
wbce_cms	eq	1.5.0
wbce_cms	eq	1.0.0
wbce_cms	eq	1.0.0-beta.2
wbce_cms	eq	1.5.1
wbce_cms	eq	1.3.2