CVE-2022-45051
Medium
Description
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Service.template.cls endpoint does not properly neutralise user input, resulting in the vulnerability.
SeverityMedium
CVSS6.1
Exploit probability—
ProductAxiell Iguana
PublishedJan 4, 2023
First seenJan 4, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- axiell iguana4.5.02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axiell iguana | 4.0.0 ≤ v < 4.5.02 | 4.5.02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.