CVE-2022-2956

CVE-2022-2956 concerns ConsoleTVs Noxen, affecting the /Noxen-master/users.php component. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the create_user_username argument (example input: >). The public exploit is noted, and exploitation could be performed remo...

CVE-2022-2956: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the file /Noxen-master/users.php. The manipulation of the argument createuserusername with the input " leads to cross site scripting. It is possible to launch the attack remotely. The...

Noxen 跨站脚本漏洞

Noxen is an open source content management system from the individual developer Erik C. Forés. Noxen suffers from a cross-site scripting vulnerability that originates from an attacker being able to enter a special string that results in cross-site scripting of the variable createuserusername by a...