CVE-2022-45038

CVSS V2 None CVSS V3 None
Description
A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field.
Overview
  • CVE ID
  • CVE-2022-45038
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-25T16:15:10
  • Last Modified Date
  • 2022-11-28T21:07:26
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:wbce:wbce_cms:1.5.4:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://shimo.im/docs/Ee32MrJd80iEwyA2
History
Created Old Value New Value Data Type Notes
2022-11-25 17:00:22 Added to TrackCVE
2022-12-07 18:04:00 2022-11-25T16:15Z 2022-11-25T16:15:10 CVE Published Date updated
2022-12-07 18:04:00 2022-11-28T21:07:26 CVE Modified Date updated
2022-12-07 18:04:00 Analyzed Vulnerability Status updated
2022-12-07 18:04:00 CWE-79 Weakness Enumeration new
2022-12-07 18:04:01 CPE Information updated