CVE-2022-25582

5.4

MEDIUMCVSS v3

Published

March 25, 2022

CVSS v2

3.5 LOW

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field.

classcms_project / classcms

cpe:2.3:a:classcms_project:classcms:*:*:*:*:*:*:*:*

<= 2.5

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2022-25582

Description

More on this CVE