CVE-2022-25784

User controllable HTML element attribute (potential XSS) PUBLISHED

Description (CNA)

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Affected (CNA)

Vendor / product	Versions
Secomea / SiteManager	affected all before 9.7

CWE

CWE-79

References

https://www.secomea.com/support/cybersecurity-advisory/

ADP enrichment

CVE

No English description supplied.

https://www.secomea.com/support/cybersecurity-advisory/