CVE-2022-2956

CVE-2022-2956 concerns ConsoleTVs Noxen, affecting the /Noxen-master/users.php component. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the create_user_username argument (example input: >). The public exploit is noted, and exploitation could be performed remo...

CVE-2022-2956

A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the file /Noxen-master/users.php. The manipulation of the argument createuserusername with the input "alert/xss/ leads to cross site scripting. It is possible to launch the attack...

CVE-2022-2956: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in ConsoleTVs Noxen. Affected is an unknown function of the file /Noxen-master/users.php. The manipulation of the argument createuserusername with the input " leads to cross site scripting. It is possible to launch the attack remotely. The...

Noxen cross-site scripting vulnerabilities

Noxen is an open source content management system from the individual developer Erik C. Forés. Noxen suffers from a cross-site scripting vulnerability that originates from an attacker being able to enter a special string that results in cross-site scripting of the variable createuserusername by a...