First published: Thu Dec 31 2020(Updated: )
Exponent CMS before 2.6.0 has improper input validation in usersController.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Exponentcms Exponent Cms | <2.6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-9022 has a medium severity rating due to improper input validation.
To fix CVE-2016-9022, upgrade Exponent CMS to version 2.6.0 or later.
The improper input validation in CVE-2016-9022 could allow attackers to exploit vulnerabilities and gain unauthorized access.
CVE-2016-9022 affects all versions of Exponent CMS prior to 2.6.0.
There are no known workarounds for CVE-2016-9022, so upgrading to a patched version is necessary.