CVE-2022-27887: XSS

Published Mar 25, 2022

Updated

Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter.

Affected Software

11 affected components

maccms Maccms=10.0-2021.1000.1081

maccms Maccms=10.0-2022.1000.1099

maccms Maccms=10.0-2022.1000.3001

maccms Maccms=10.0-2022.1000.3002

maccms Maccms=10.0-2022.1000.3004

maccms Maccms=10.0-2022.1000.3005

maccms Maccms=10.0-2022.1000.3025

maccms Maccms=10.0-2022.1000.3026

maccms Maccms=10.0-2022.1000.3027

maccms Maccms=10.0-2022.1000.3028

maccms Maccms=10.0-2022.1000.3029

Event History

Mar 25, 2022

CVE Published

via MITRE·06:50 PM

Data Sourced

via MITRE·06:50 PM

Description

Frequently Asked Questions

What is CVE-2022-27887?

CVE-2022-27887 is a reflected cross-site scripting (XSS) vulnerability in Maccms v10.

How severe is CVE-2022-27887?

CVE-2022-27887 has a severity rating of 6.1, which is considered medium.

What software versions are affected by CVE-2022-27887?

CVE-2022-27887 affects Maccms v10 versions 10.0-2021.1000.1081, 10.0-2022.1000.1099, 10.0-2022.1000.3001, 10.0-2022.1000.3002, 10.0-2022.1000.3004, 10.0-2022.1000.3005, 10.0-2022.1000.3025, 10.0-2022.1000.3026, 10.0-2022.1000.3027, 10.0-2022.1000.3028, and 10.0-2022.1000.3029.

How can I exploit CVE-2022-27887?

I am sorry, but I cannot provide assistance or guidance on exploiting vulnerabilities.

How can I fix CVE-2022-27887?

To fix CVE-2022-27887, it is recommended to update to a patched version of Maccms v10 or apply any available security patches provided by the vendor.