CVE-2022-26573: XSS

Published Mar 25, 2022

Updated

Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.

Affected Software

11 affected components

maccms Maccms=10.0-2021.1000.1081

maccms Maccms=10.0-2022.1000.1099

maccms Maccms=10.0-2022.1000.3001

maccms Maccms=10.0-2022.1000.3002

maccms Maccms=10.0-2022.1000.3004

maccms Maccms=10.0-2022.1000.3005

maccms Maccms=10.0-2022.1000.3025

maccms Maccms=10.0-2022.1000.3026

maccms Maccms=10.0-2022.1000.3027

maccms Maccms=10.0-2022.1000.3028

maccms Maccms=10.0-2022.1000.3029

Event History

Mar 25, 2022

CVE Published

via MITRE·06:50 PM

Data Sourced

via MITRE·06:50 PM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-26573?

CVE-2022-26573 is a vulnerability found in Maccms v10 that allows for multiple reflected cross-site scripting (XSS) attacks.

What is the severity of CVE-2022-26573?

The severity of CVE-2022-26573 is medium with a CVSS score of 6.1.

How does CVE-2022-26573 affect Maccms v10?

CVE-2022-26573 affects Maccms v10 by introducing multiple reflected cross-site scripting (XSS) vulnerabilities in the /admin.php/admin/art/data.html page.

What is the fix for CVE-2022-26573?

To fix CVE-2022-26573, it is recommended to update Maccms v10 to a version that includes the fix for the XSS vulnerabilities.

Is there any additional information about CVE-2022-26573?

For additional information about CVE-2022-26573, you can refer to the GitHub issue at: https://github.com/magicblack/maccms10/issues/840