CVE-2022-23321: XSS
Published Feb 10, 2022
·Updated
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
Affected Software
1 affected component
Xerox Xmpie Ustore=12.3.7244.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
XMPie UStoreto a version that resolves this vulnerability.Fixed in 12.3.7244.0
Event History
Feb 10, 2022
CVE Published
via MITRE·06:11 PM
Data Sourced
via MITRE·06:11 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-23321.
2
What is the severity of CVE-2022-23321?
The severity of CVE-2022-23321 is medium with a severity value of 4.8.
3
What is the affected software version of CVE-2022-23321?
The affected software version of CVE-2022-23321 is XMPie UStore version 12.3.7244.0.
4
What is the CWE ID associated with CVE-2022-23321?
The CWE ID associated with CVE-2022-23321 is CWE-79.
5
How can I fix the persistent cross-site scripting vulnerability in XMPie UStore?
To fix the persistent cross-site scripting vulnerability in XMPie UStore, apply the latest security patch or update to a version that addresses the vulnerability.