CVE-2022-25630

An authenticated user can embed malicious content with XSS into the admin group policy page...

CVE-2022-25630: Improper Neutralization of Input During Web Page Generation

An authenticated user can embed malicious content with XSS into the admin group policy page...

CVE-2022-25630

Broadcom Symantec Messaging Gateway is affected by CVE-2022-25630, a stored XSS vulnerability exploitable by an authenticated user on the admin group policy page. Public details describe an authenticated user injecting payloads via the AdminGroupPolicyFlow$save.flo endpoint, with the issue enabli...