CVE-2022-45050
Medium
Description
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The title parameter on the twitter.php endpoint does not properly neutralise user input, resulting in the vulnerability.
SeverityMedium
CVSS6.1
Exploit probability—
ProductAxiell Iguana
PublishedDec 1, 2022
First seenDec 1, 2022
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- axiell iguana4.5.02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axiell iguana | 4.0.0 ≤ v < 4.5.02 | 4.5.02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.