admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 10:17:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-23049.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

865 B
Raw Permalink Blame History

CVE-2022-23049

Description

Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator user visits the "User Sessions" tab, the JavaScript will be triggered allowing an attacker to compromise the administrator session.

POC

Reference

Github

No PoCs found on GitHub currently.