VULNERABILITY INTELLIGENCE

CVE-2022-45049

CVSS score6.1 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-01-04
Last modified2026-06-17

Description

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.