CVE-2022-32442

creationtimestamp| type| source ---|---|--- 2022-06-17 20:22:56+00:00| seen| https://t.me/cibsecurity/44747...

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

CVE-2022-32442

u5cms version 8.3.5 is vulnerable to Cross Site Scripting XSS. When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl 96502%27bad=", it can cause html injection...

CVE-2022-32442

CVE-2022-32442 affects u5cms 8.3.5. The issue is a stored/reflected XSS on the default home page caused by insufficient input validation of a URL parameter (example: Onmouseover=%27tzgl (96502)%27bad=). Documents confirm HTML injection risk; no explicit exploit details or remediation are provided...