Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-25784

User controllable HTML element attribute (potential XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Secomea

Description

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Secomea SiteManager

  • all to < 9.7affected

References