CVE-2022-33009

LightCMS v1.3.11 has a stored XSS vulnerability exploitable by uploading a crafted PDF file. Root cause: insufficient validation of user-supplied data and output filtering. Impact is client-side script execution. Affected version: LightCMS 1.3.11. No remediation details are provided in the suppli...