Reflected Cross-Site Scripting Vulnerability in Maccms by Magicblack
CVE-2022-27886

6.1MEDIUM

Key Information:

Vendor

Maccms

Status
Maccms
Vendor
CVE Published:
25 March 2022

What is CVE-2022-27886?

A reflected cross-site scripting (XSS) vulnerability has been identified in Maccms v10, specifically affecting the /admin.php/admin/ulog/index.html endpoint through the wd parameter. This issue could allow an attacker to inject malicious scripts into web pages viewed by users, posing a significant risk to web application security. It is essential for users of Maccms to apply necessary patches and follow security best practices to mitigate the impact of this vulnerability.

References

https://github.com/magicblack/maccms10/issues/840
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.