Cross site scripting

2023-02-0722:15:00

PRIOn knowledge base

www.prio-n.com

mayan edms

xss

vulnerability

tagging system

exploitation

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.4%

An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.

CPENameOperatorVersion
mayan_edmseq4.3.3

CPE	Name	Operator	Version
	mayan_edms	eq	4.3.3

References

www.mayan-edms.com/news/2023/02/version-4.3.6/

www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/