CVE-2022-45037

CVSS V2 None CVSS V3 None
Description
A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field.
Overview
  • CVE ID
  • CVE-2022-45037
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-25T16:15:10
  • Last Modified Date
  • 2022-11-28T21:07:35
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:wbce:wbce_cms:1.5.4:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://shimo.im/docs/dPkpKPQEjXfvYoqO
History
Created Old Value New Value Data Type Notes
2022-11-25 17:00:23 Added to TrackCVE
2022-12-07 18:03:58 2022-11-25T16:15Z 2022-11-25T16:15:10 CVE Published Date updated
2022-12-07 18:03:58 2022-11-28T21:07:35 CVE Modified Date updated
2022-12-07 18:03:58 Analyzed Vulnerability Status updated
2022-12-07 18:03:59 CWE-79 Weakness Enumeration new
2022-12-07 18:04:00 CPE Information updated