CVE-2022-45036

CVSS V2 None CVSS V3 None
Description
A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the No Results field.
Overview
  • CVE ID
  • CVE-2022-45036
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-25T16:15:10
  • Last Modified Date
  • 2022-11-28T21:07:44
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:wbce:wbce_cms:1.5.4:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://shimo.im/docs/2wAlXR1j6BsJlDAP
History
Created Old Value New Value Data Type Notes
2022-11-25 17:00:23 Added to TrackCVE
2022-12-07 18:03:57 2022-11-25T16:15Z 2022-11-25T16:15:10 CVE Published Date updated
2022-12-07 18:03:57 2022-11-28T21:07:44 CVE Modified Date updated
2022-12-07 18:03:57 Analyzed Vulnerability Status updated
2022-12-07 18:03:57 CWE-79 Weakness Enumeration new
2022-12-07 18:03:58 CPE Information updated