2 matches found
CVE-2022-41472
74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...
5.4CVSS5.9AI score0.00417EPSS
SaveExploits1References1
CVE-2022-41472: Improper Neutralization of Input During Web Page Generation
74cmsSE v3.12.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /apiadmin/notice/add. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field...
5.4CVSS6.1AI score0.00417EPSS
SaveExploits1References3
20