← CVE Intelligence

CVE-2022-39027

e-Excellence Inc. U-Office Force - Stored XSS PUBLISHED

Description (CNA)

U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.

Affected (CNA)

Vendor / productVersions
e-Excellence Inc. / U-Office Forceaffected unspecified through 20.50.7821D Build:202104sp1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.