VULNERABILITY INTELLIGENCE
CVE-2022-45049
CVSS score6.1 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-01-04
Last modified2026-06-17
Description
A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelist.php endpoint does not properly neutralise user input, resulting in the vulnerability.