CVE-2022-27885

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters.
References
Link Resource
https://github.com/magicblack/maccms10/issues/840 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:maccms:maccms:10.0:2021.1000.1081:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.1099:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3001:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3002:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3004:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3005:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3025:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3026:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3027:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3028:*:*:*:*:*:*
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3029:*:*:*:*:*:*

History

No history.

Information

Published : 2022-03-25 19:15

Updated : 2024-02-28 19:09


NVD link : CVE-2022-27885

Mitre link : CVE-2022-27885

CVE.ORG link : CVE-2022-27885


JSON object : View

Products Affected

maccms

  • maccms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')