CVE-2022-39027

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS Stored Cross-Site Scripting attack...

CVE-2022-39027 e-Excellence Inc. U-Office Force - Stored XSS

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS Stored Cross-Site Scripting attack...

CVE-2022-39027

CVE-2022-39027 concerns the U-Office Force Forum function, where insufficient filtering for special characters enables a remote, low-privilege (general user) attacker to inject JavaScript and execute a stored XSS attack. The description across sources consistently identifies this as a cross-site ...