CVE-2022-23047

Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site…

published February 9, 2022

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site Header" parameters while updating the site settings on "/exponentcms/administration/configure_site"

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02936 · 87.0th percentile
Published
2022-02-09T22:03Z
EPSS history
Timeline
  • 09 FEB 22:03Z
    Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site…
    cvelistv5