Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2022-39035

Smart eVision - Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function. An unauthenticated remote attacker can inject JavaScript to perform XSS (Stored Cross-Site Scripting) attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Smart eVision Information Technology Inc. Smart eVision

  • 2022.02.21affected

References