e-Excellence Inc. U-Office Force - Stored XSS
CVE-2022-39027

5.4MEDIUM

Key Information:

Vendor: E-excellence Inc.
Status: U-office Force
Vendor: CVE Published:; 31 October 2022

🔔 Create E-excellence Inc. Vulnerability Alert

What is CVE-2022-39027?

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

U-Office Force <= 20.50.7821D Build:202104sp1

References

https://www.twcert.org.tw/tw/cp-132-6642-bf567-1.html

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Oct 31, 2022
Vulnerability Reserved
Aug 30, 2022

JSON

E-excellence Inc.