CVE-2022-44870

Cedric1314/CVE-2022-44870

on github

magicblack/maccms10

on github

Published

January 6, 2023

Severity

CVSS v3:

6.1 MEDIUM

CVSS v2:

N/A

Description

A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module.

References

https://github.com/Cedric1314/CVE-2022-44870/blob/main/README.md
https://github.com/magicblack/maccms10/issues/986

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:maccms:maccms:10.0:2022.1000.3032::::::	n/a	n/a	10.0

External Links

NVD - CVE-2022-44870