CVE-2022-28589

CVE-2022-28589 is a stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 CMS. The issue arises from lack of data validation/filtering of user-supplied and output data in the Title field of admin/pages.php?action=add_new, enabling an attacker to inject arbitrary web scripts/HTML. Docu...